X
Tippen Sie hierhin, um die Version dieser Website für Mobilgeräte aufzurufen.

Hilfeforum

How to delete certificate authority from installation folder instead?

Veröffentlicht

Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10?

Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers)

Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient.

upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)

Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10? Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers) Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient. upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)

Mehr Details zum System

Installierte Plugins

  • Shockwave Flash 32.0 r0

Anwendung

  • User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0

Weitere Informationen

cor-el
  • Top 10 Contributor
  • Moderator
17567 Lösungen 158896 Antworten
Veröffentlicht

What certificate(s) is this about and who is the issuer?

It shouldn't be necessary to remove/disable builtin certificates. Firefox stores intermediate certificates send by the server in cert9.db in the profile folder.

If this is a problem with security software then you should fix it there.

What certificate(s) is this about and who is the issuer? It shouldn't be necessary to remove/disable builtin certificates. Firefox stores intermediate certificates send by the server in cert9.db in the profile folder. If this is a problem with security software then you should fix it there. *https://support.mozilla.org/en-US/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER
jscher2000
  • Top 10 Contributor
8785 Lösungen 71851 Antworten
Veröffentlicht

It's possible that security software added an authority certificate in the past that has expired or is creating other issues. As an alternative to removing an individual certificate, you could blow away the cert9.db file and let Firefox start with just the default certificates. Whether that is more convenient is difficult to say.

But to address your question, I don't think a cert9.db file can be edited (deleting a certificate) from outside Firefox without using a dedicated tool, because it is a SQLite database file. You could take a look at the following, but if you are pretty much done with this project, it may not be worth the effort:

https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil

It's possible that security software added an authority certificate in the past that has expired or is creating other issues. As an alternative to removing an individual certificate, you could blow away the cert9.db file and let Firefox start with just the default certificates. Whether that is more convenient is difficult to say. But to address your question, I don't think a cert9.db file can be edited (deleting a certificate) from outside Firefox without using a dedicated tool, because it is a SQLite database file. You could take a look at the following, but if you are pretty much done with this project, it may not be worth the effort: https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil
cor-el
  • Top 10 Contributor
  • Moderator
17567 Lösungen 158896 Antworten
Veröffentlicht
See also: *https://blogs.oracle.com/meena/whats-new-in-nss-312-new-shared-dbs *https://wiki.mozilla.org/NSS_Shared_DB
Veröffentlicht

Fragesteller

Would setting up the "Firefox for Enterprise" to centrally manage all users' Firefox help resolving this issue?

Would setting up the "Firefox for Enterprise" to centrally manage all users' Firefox help resolving this issue?
jscher2000
  • Top 10 Contributor
8785 Lösungen 71851 Antworten
Veröffentlicht

You could check the Enterprise help pages to see whether they mention how you would remove certificates.

https://support.mozilla.org/products/firefox-enterprise

You could check the Enterprise help pages to see whether they mention how you would remove certificates. https://support.mozilla.org/products/firefox-enterprise