Bug#769381: iceweasel does not report for self-signed certificate (MITM to youtube.com)

[Stanislav Vlasov]

Package: iceweasel
Version: 31.2.0esr-2~deb7u1
Severity: normal

Dear Maintainer,

My internet provider add url-filtration for https by using self-signed
certificates.
Google Chrome (from google) and Chromium (from Debian) see it and fail.
Iceweasel does nothing, as if cert is valid.

I am exec openssl s_client -connect www.youtube.com:443 via filter and
direct and attach output

-- Package-specific info:

-- Extensions information
Name: Стандартная theme
Location: /usr/lib/iceweasel/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled

Name: Adblock Plus
Location: ${PROFILE_EXTENSIONS}/{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
Status: enabled

Name: Certificate Patrol
Location: ${PROFILE_EXTENSIONS}/CertPatrol at PSYC.EU.xpi
Status: enabled

Name: DownloadHelper
Location: ${PROFILE_EXTENSIONS}/{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
Status: enabled

Name: Russian (RU) Language Pack locale
Location: /usr/lib/iceweasel/browser/extensions/langpack-ru at iceweasel.mozilla.org.xpi
Package: iceweasel-l10n-ru
Status: enabled

Name: Tab Wheel Scroll
Location: ${PROFILE_EXTENSIONS}/tabscroll at mthamil.xpi
Status: enabled

-- Plugins information
Name: Google Talk Plugin
Location: /opt/google/talkplugin/libnpgoogletalk.so
Package: google-talkplugin
Status: enabled

Name: Google Talk Plugin Video Renderer
Location: /opt/google/talkplugin/libnpo1d.so
Package: google-talkplugin
Status: enabled

Name: IcedTea-Web Plugin (using IcedTea-Web 1.4 (1.4-3~deb7u2))
Location: /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so
Package: icedtea-7-plugin:amd64
Status: enabled

Name: Shockwave Flash
Location: /usr/lib/flashplayer-mozilla/libflashplayer.so
Package: flashplayer-mozilla
Status: enabled

Name: Shockwave Flash
Location: /home/stas/.mozilla/plugins/libflashplayer.so
Status: enabled

Name: VLC Web Plugin
Location: /usr/lib/mozilla/plugins/libvlcplugin.so
Package: browser-plugin-vlc
Status: enabled


-- Addons package information
ii  browser-plugin 2.0.0-2      amd64        multimedia plugin for web browser
ii  flashplayer-mo 3:11.2.202.4 amd64        Macromedia Flash Player
ii  google-talkplu 5.4.2.0-1    amd64        Google Talk Plugin
ii  icedtea-7-plug 1.4-3~deb7u2 amd64        web browser plugin based on OpenJ
ii  iceweasel      31.2.0esr-2~ amd64        Web browser based on Firefox
ii  iceweasel-l10n 1:31.2.0esr- all          Russian language package for Icew

-- System Information:
Debian Release: 7.7
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii  debianutils               4.3.2
ii  fontconfig                2.9.0-7.1
ii  libasound2                1.0.25-4
ii  libatk1.0-0               2.4.0-2
ii  libc6                     2.13-38+deb7u6
ii  libcairo2                 1.12.2-3
ii  libdbus-1-3               1.6.8-1+deb7u4
ii  libdbus-glib-1-2          0.100.2-1
ii  libevent-2.0-5            2.0.19-stable-3
ii  libffi5                   3.0.10-3
ii  libfontconfig1            2.9.0-7.1
ii  libfreetype6              2.4.9-1.1
ii  libgcc1                   1:4.7.2-5
ii  libgdk-pixbuf2.0-0        2.26.1-1
ii  libglib2.0-0              2.33.12+really2.32.4-5
ii  libgtk2.0-0               2.24.10-2
ii  libhunspell-1.3-0         1.3.2-4
ii  libpango1.0-0             1.30.0-1
ii  libsqlite3-0              3.7.13-1+deb7u1
ii  libstartup-notification0  0.12-1
ii  libstdc++6                4.7.2-5
ii  libx11-6                  2:1.5.0-1+deb7u1
ii  libxext6                  2:1.3.1-2+deb7u1
ii  libxrender1               1:0.9.7-1+deb7u1
ii  libxt6                    1:1.1.3-1+deb7u1
ii  procps                    1:3.3.3-3
ii  zlib1g                    1:1.2.7.dfsg-13

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
ii  fonts-mathjax          2.2-1~bpo70+1
pn  fonts-oflb-asana-math  <none>
ii  fonts-stix [otf-stix]  1.1.0-1
ii  libcanberra0           0.28-6
ii  libgnomeui-0           2.24.5-2
ii  libgssapi-krb5-2       1.10.1+dfsg-5+deb7u2
pn  mozplugger             <none>

-- no debconf information

-- 
Stanislav
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cert_direct
Type: application/octet-stream
Size: 5046 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20141113/f47e21e4/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cert_filter
Type: application/octet-stream
Size: 13229 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20141113/f47e21e4/attachment-0003.obj>