X
Tippen Sie hierhin, um die Version dieser Website für Mobilgeräte aufzurufen.

Hilfeforum

Confirm security exceptions is not working after update to 3.6.

Veröffentlicht

After update to 3.6 none of the certificates are being authorized for https: dod sites. When I try to trust the certificates by using an exception nothing happens.

URL of affected sites

https://www.dmdc.osd.mil/swg/owa/DMDC.HOME

After update to 3.6 none of the certificates are being authorized for https: dod sites. When I try to trust the certificates by using an exception nothing happens. == URL of affected sites == https://www.dmdc.osd.mil/swg/owa/DMDC.HOME

Mehr Details zum System

Installierte Plugins

  • -Gecko default plugin
  • Runs Java applets using the latest installed versions of Java. For more information: Java Embedding Plugin. Run version test: Java Information.
  • Office Live Update v1.0
  • iPhoto6
  • Java Plug-In 2 for NPAPI Browsers
  • Simple plug-in that handles Citrix connection files
  • 4.0.50401.0
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in web pages. For more information, visit the QuickTime Web site.
  • The Flip4Mac WMV Plugin allows you to view Windows Media content using QuickTime.
  • Shockwave Flash 10.1 r53

Anwendung

  • User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8

Weitere Informationen

Application Basics
Name
Firefox
Version
3.6.8
Profile Directory
Show in Finder
Installed Plugins
about:plugins
Build Configuration
about:buildconfig
Extensions
Name
Version
Enabled
ID
Modified Preferences
Name
Value
browser.history_expire_days.mirror
180
browser.places.smartBookmarksVersion
2
browser.startup.homepage_override.mstone
rv:1.9.2.8
extensions.lastAppVersion
3.6.8
network.cookie.cookieBehavior
1
network.cookie.prefsMigrated
true
places.last_vacuum
1276316432
print.macosx.pagesetup-2
PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIHBsaXN0IFBVQkxJQyAiLS8vQXBwbGUvL0RURCBQTElTVCAxLjAvL0VO…
print.print_bgcolor
false
print.print_bgimages
false
print.print_command
print.print_downloadfonts
false
print.print_evenpages
true
print.print_in_color
true
print.print_margin_bottom
0.5
print.print_margin_left
0.5
print.print_margin_right
0.5
print.print_margin_top
0.5
print.print_oddpages
true
print.print_orientation
0
print.print_pagedelay
500
print.print_paper_data
0
print.print_paper_height
11.00
print.print_paper_size_type
1
print.print_paper_size_unit
0
print.print_paper_width
8.50
print.print_printer
print.print_reversed
false
print.print_scaling
1.00
print.print_shrink_to_fit
true
print.print_to_file
false
print.print_unwriteable_margin_bottom
50
print.print_unwriteable_margin_left
25
print.print_unwriteable_margin_right
25
print.print_unwriteable_margin_top
7
privacy.sanitize.migrateFx3Prefs
true
security.disable_button.openCertManager
false
security.warn_viewing_mixed
false

cor-el
  • Top 10 Contributor
  • Moderator
17697 Lösungen 160119 Antworten
Veröffentlicht

You need to install the DoD root (Class 3 Root and Root CA-2) certificates

  1. http://dodpki.c3pki.den.disa.mil/
  2. http://militarycac.com/dodcerts.htm
You need to install the DoD root (Class 3 Root and Root CA-2) certificates # http://dodpki.c3pki.den.disa.mil/ # http://militarycac.com/dodcerts.htm

Fragesteller

I went through the process of installing the cert but they do not show up in the certificate list. The pop up for trusting the CA comes up then they do not appear in the list.

I went through the process of installing the cert but they do not show up in the certificate list. The pop up for trusting the CA comes up then they do not appear in the list.
cor-el
  • Top 10 Contributor
  • Moderator
17697 Lösungen 160119 Antworten
Veröffentlicht

You need to look at "U.S. Government" in the certificate list for the DoD certificates.

You need to look at "U.S. Government" in the certificate list for the DoD certificates.

Fragesteller

There is not even a U.S. Government category on my list of certificates. Safari is working fine for the same sites but is not supported on others. So between the two I was able to finish what I was working on. Would be nice if Firefox would work properly.

There is not even a U.S. Government category on my list of certificates. Safari is working fine for the same sites but is not supported on others. So between the two I was able to finish what I was working on. Would be nice if Firefox would work properly.
cor-el
  • Top 10 Contributor
  • Moderator
17697 Lösungen 160119 Antworten
Veröffentlicht

Did you import the DOD root certificates?

Firefox > Preferences > Advanced : Encryption: Certificates

Did you import the DOD root certificates? Firefox > Preferences > Advanced : Encryption: Certificates
alaingoldsticker 0 Lösungen 2 Antworten
Veröffentlicht

Here are the instructions on how to load the DoD certificates/authorities to Firefox:

  • To import DoD Root CA certificates:

+Using Firefox, navigate to http://dodpki.c3pki.chamb.disa.mil/rootca.html +Click on the first link labeled "Download Class 3 Root CA Certificate" +and click on the "View Button". -Ensure that the SHA1 Fingerprint shown at the bottom matches the below: 10:F1:93:F3:40:AC:91:D6:DE:5F:1E:DC:00:62:47:C4:F2:5D:96:71 -!!! If it does not match, do not install the certificate !!! -If it does match, click on the "Close" button, check the first two check boxes and click "OK" - you may receive some errors for certificates that have expired, just click "OK" to continue.

+Follow the same procedures to download and install the DoD Root CA 2 +and External Certification Authority (ECA) Root CA certificates by clicking on the appropriate links and verifying the certificates by confirming the SHA1 Fingerprint matches the below:

-DoD Root CA 2 Fingerprint: 8C:94:1B:34:EA:1E:A6:ED:9A:E2:BC:54:CF:68:72:52:B4:C9:B5:61 -ECA Root CA Fingerprint: 3A:32:EF:7B:9A:B8:36:F8:37:18:1A:4C:EF:A3:55:C6:46:67:AC:BF

Once loaded they will show-up under U.S. Government, for some reason Firefox does not read these certificates/authorities from KeyChain Access same as Safari.

Here are the instructions on how to load the DoD certificates/authorities to Firefox: *To import DoD Root CA certificates: +Using Firefox, navigate to http://dodpki.c3pki.chamb.disa.mil/rootca.html +Click on the first link labeled "Download Class 3 Root CA Certificate" +and click on the "View Button". -Ensure that the SHA1 Fingerprint shown at the bottom matches the below: 10:F1:93:F3:40:AC:91:D6:DE:5F:1E:DC:00:62:47:C4:F2:5D:96:71 -!!! If it does not match, do not install the certificate !!! -If it does match, click on the "Close" button, check the first two check boxes and click "OK" - you may receive some errors for certificates that have expired, just click "OK" to continue. +Follow the same procedures to download and install the DoD Root CA 2 +and External Certification Authority (ECA) Root CA certificates by clicking on the appropriate links and verifying the certificates by confirming the SHA1 Fingerprint matches the below: -DoD Root CA 2 Fingerprint: 8C:94:1B:34:EA:1E:A6:ED:9A:E2:BC:54:CF:68:72:52:B4:C9:B5:61 -ECA Root CA Fingerprint: 3A:32:EF:7B:9A:B8:36:F8:37:18:1A:4C:EF:A3:55:C6:46:67:AC:BF Once loaded they will show-up under U.S. Government, for some reason Firefox does not read these certificates/authorities from KeyChain Access same as Safari.