This Connection is Untrusted with error code Error code: mozilla_pkix_error_v1_cert_used_as_ca) after upgrading to Version 38 for my website .
My website is working fine wiht Firefox 35 version with no issues . but when i upgrade it to version 38 i started getting Error code: mozilla_pkix_error_v1_cert_used_as_ca) . i verified my certificate and it is valid till year end
Wubrane rozwězanje
There are hundreds of changes in each major release of Firefox, so the cause of the issue could be difficult to guess without more information.
Do you want to post the URL of your site?
If not, could you generate a report using this test page: https://www.ssllabs.com/ssltest/. That often will help identify the problem Firefox has with the certificate.
Toś to wótegrono w konteksće cytaś 👍 0Wšykne wótegrona (7)
Wubrane rozwězanje
There are hundreds of changes in each major release of Firefox, so the cause of the issue could be difficult to guess without more information.
Do you want to post the URL of your site?
If not, could you generate a report using this test page: https://www.ssllabs.com/ssltest/. That often will help identify the problem Firefox has with the certificate.
By the way, did you ever test in Firefox 36 or 37? It might be helpful to track down which versions did and did not object as a way to narrow down the problem. You can use the unofficial "Portable" versions of Firefox 36 and 37 to test that without disrupting your main installation.
i think the site was working fine as of firefox 35. that is the last version
The root signing certificate ("GTE CyberTrust Global Root") was removed in Firefox 36. No version of Firefox from 36 on will trust certificates that depend on that root.
This change is part of an effort to no longer trust some signing certificates. See: https://blog.mozilla.org/security/201.../phase-2-phasing-out-certificates-with-1024-bit-rsa-keys/.
At the time this change was approved, only 47 of the Alexa Top 1 Million sites were detected as still using it. Yours wasn't on the list, so no one reached out to you with this information.
Sorry! You'll need a new cert.
you mean do i need to get a new cert from a different authority or from GTE it self
You could check with your original cert vendor (the article suggests it's Verizon) on whether they have a free replacement valid for the rest of the term (through July). Otherwise, you'll need a new one from any certificate issuer your company has on its approved vendor list. Or maybe the company has a signing certificate and can generate a new one without any actual purchase??