Bug#690894: firefox: not possible to load HTTPS version of a page when HTTP version is in browser history

[Roland Hieber]

Package: iceweasel
Version: 16.0.1-1
Severity: normal

Dear Maintainer,

I was browsing http://status.stratum0.org/status.json, and I wanted to switch
over to the HTTPS version of the site (which gives a security warning, but
nevertheless, HTTPS works). When prepending the URL in the address bar with
"https://" and pressing Enter, the HTTP version is loaded though. When I delete
that URL from my browser history and try again, it works and the HTTPS version
is loaded.

Apparently, this only affects URLs which are entered manually into the adress
bar, and end in a file name, at least I could not reproduce it with:

* http://status.stratum0.org
* http://rohieb.name
* http://rohieb.name/stuff/
* http://www.amazon.com
* http://www.google.de/
* http://www.gmx.net/presse/

But it is reproducible on the following pages:
* http://ecx.images-amazon.com/images/I/51rcs86cppL._SL135_.jpg
* http://rohieb.name/favicon.ico
* http://www.amazon.com/gp/help/customer/display.html
* http://www.google.de/favicon.ico
* http://www.gmx.net/presse/index.html

However I also found one URL which does not trigger the bug:
* http://res1.windows.microsoft.com/resbox/en/Windows%207/main/4300ae64-546c-4bbe-9026-6779b3684fb9_74.png

So I'm a bit puzzled what is the pattern here.

-Roland

-- Package-specific info:

-- Extensions information
Name: Default theme
Location: /usr/lib/iceweasel/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled

-- Plugins information
Name: IcedTea-Web Plugin (using IcedTea-Web 1.3 (1.3-2))
Location: /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so
Package: icedtea-6-plugin:amd64
Status: enabled

Name: Shockwave Flash
Location: /usr/lib/flashplugin-nonfree/libflashplayer.so
Status: enabled


-- Addons package information
ii  icedtea-6-plug 1.3-2        amd64        web browser plugin based on OpenJ
ii  iceweasel      16.0.1-1     amd64        Web browser based on Firefox

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing-proposed-updates
  APT policy: (500, 'testing-proposed-updates'), (500, 'testing'), (1, 'experimental'), (1, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii  debianutils         4.3.2
ii  fontconfig          2.9.0-7
ii  libc6               2.13-35
ii  libgdk-pixbuf2.0-0  2.26.1-1
ii  libglib2.0-0        2.32.3-1
ii  libgtk2.0-0         2.24.10-2
ii  libnspr4            2:4.9.2-1
ii  libnspr4-0d         2:4.9.2-1
ii  libsqlite3-0        3.7.13-1
ii  libstdc++6          4.7.1-7
ii  procps              1:3.3.3-2
ii  xulrunner-16.0      16.0.1-1

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
ii  fonts-stix [otf-stix]  1.1.0-1
ii  libgssapi-krb5-2       1.10.1+dfsg-2
pn  mozplugger             <none>

Versions of packages xulrunner-16.0 depends on:
ii  libasound2                1.0.25-4
ii  libatk1.0-0               2.4.0-2
ii  libbz2-1.0                1.0.6-4
ii  libc6                     2.13-35
ii  libcairo2                 1.12.2-2
ii  libdbus-1-3               1.6.8-1
ii  libdbus-glib-1-2          0.100-1
ii  libevent-2.0-5            2.0.19-stable-3
ii  libfontconfig1            2.9.0-7
ii  libfreetype6              2.4.9-1
ii  libgcc1                   1:4.7.1-7
ii  libgdk-pixbuf2.0-0        2.26.1-1
ii  libglib2.0-0              2.32.3-1
ii  libgtk2.0-0               2.24.10-2
ii  libhunspell-1.3-0         1.3.2-4
ii  libjpeg8                  8d-1
ii  libmozjs16d               16.0.1-1
ii  libnotify4                0.7.5-1
ii  libnspr4                  2:4.9.2-1
ii  libnspr4-0d               2:4.9.2-1
ii  libnss3                   2:3.13.6-1
ii  libnss3-1d                2:3.13.6-1
ii  libpango1.0-0             1.30.0-1
ii  libpixman-1-0             0.26.0-3
ii  libsqlite3-0              3.7.13-1
ii  libstartup-notification0  0.12-1
ii  libstdc++6                4.7.1-7
ii  libvpx1                   1.1.0-1
ii  libx11-6                  2:1.5.0-1
ii  libxext6                  2:1.3.1-2
ii  libxrender1               1:0.9.7-1
ii  libxt6                    1:1.1.3-1
ii  zlib1g                    1:1.2.7.dfsg-13

Versions of packages xulrunner-16.0 suggests:
ii  libcanberra0  0.28-5
ii  libgnomeui-0  2.24.5-2

-- no debconf information