Bug#756101: iceweasel: Cannot add exception for "sec_error_unknown_issuer"

[Frank Lanitz]

Package: iceweasel
Version: 31.0-1
Severity: normal

Dear Maintainer,

With latest updates I'm not able anymore to add an exception for HTTPS if
iceweasel is not knowing the issuer of an certificate.This is very disturbing
as e.g. Debian has also removed CAcert from list of certs so even I have the
fingerprint of the cert of a server, I cannot add them as "ok" without doing
some workaround via about:config.

I'm only getting
<domain> uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown.
(Error code: sec_error_unknown_issuer)

without any further option than  'Get me out of here!'



-- Package-specific info:

-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-rc6-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii  debianutils               4.4
ii  fontconfig                2.11.0-5
ii  libasound2                1.0.28-1
ii  libatk1.0-0               2.12.0-1
ii  libc6                     2.19-7
ii  libcairo2                 1.12.16-2
ii  libdbus-1-3               1.8.6-1
ii  libdbus-glib-1-2          0.102-1
ii  libevent-2.0-5            2.0.21-stable-1
ii  libffi6                   3.1-2
ii  libfontconfig1            2.11.0-5
ii  libfreetype6              2.5.2-1
ii  libgcc1                   1:4.9.1-1
ii  libgdk-pixbuf2.0-0        2.30.7-1
ii  libglib2.0-0              2.40.0-3
ii  libgtk2.0-0               2.24.24-1
ii  libhunspell-1.3-0         1.3.3-2
ii  libnspr4                  2:4.10.6-1
ii  libnss3                   2:3.16.3-1
ii  libpango-1.0-0            1.36.3-1
ii  libsqlite3-0              3.8.5-2
ii  libstartup-notification0  0.12-3
ii  libstdc++6                4.9.1-1
ii  libvpx1                   1.3.0-2
ii  libx11-6                  2:1.6.2-2
ii  libxext6                  2:1.3.2-1
ii  libxrender1               1:0.9.8-1
ii  libxt6                    1:1.1.4-1
ii  procps                    1:3.3.9-7
ii  zlib1g                    1:1.2.8.dfsg-1

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
pn  fonts-mathjax          <none>
ii  fonts-oflb-asana-math  000.907-6
ii  fonts-stix [otf-stix]  1.1.1-1
ii  libcanberra0           0.30-2
pn  libgnomeui-0           <none>
ii  libgssapi-krb5-2       1.12.1+dfsg-4
pn  mozplugger             <none>

-- no debconf information