X
Tap here to go to the mobile version of the site.

Support Forum

Multiple certificate authorities from the same domain causes Firefox to freeze

Posted

The QA team at my company performs tons of upgrade testing and, on each upgrade, the software generates new self-signed SSL certificates on our server. After each upgrade, they access the site with Firefox and need to make an exception for the self-signed cert (on the "Your connection is not secure" screen).

After about 10 upgrades (and accepting the new self-signed certs), Firefox (46.0.1) begins to load the page more slowly. Each time after that becomes exponentially slower: - 11th time takes a couple of seconds to load - 12th takes 10+ seconds - 13th takes 30+ seconds, and finally; - 14th just doesn't load (or eventually does but I gave up after a few minutes)

This can be fixed by deleting all of the Authorities from the self-signed certs (not the certs themselves). So, I'd go to Preferences > Advanced > Certificates (tab) > View Certificates > Authorities and then delete the authorities related to the self-signed certs; the actual certs aren't removed. This fixes the problem until the next 10th upgrade is performed.

This also affects Firefox 45.0.1 - though is considerably worse than 46.0.1; it's unusable after 8 upgrades. When I say "unusable" I mean that our site doesn't load, all other websites load and work correctly.

This affects Firefox on Mac OS X, CentOS 7/6.6, and Windows 7. The only plugin installed is Firebug

Any thoughts as to why this is occurring?

Thanks in advance for the help.

The QA team at my company performs tons of upgrade testing and, on each upgrade, the software generates new self-signed SSL certificates on our server. After each upgrade, they access the site with Firefox and need to make an exception for the self-signed cert (on the "Your connection is not secure" screen). After about 10 upgrades (and accepting the new self-signed certs), Firefox (46.0.1) begins to load the page more slowly. Each time after that becomes exponentially slower: - 11th time takes a couple of seconds to load - 12th takes 10+ seconds - 13th takes 30+ seconds, and finally; - 14th just doesn't load (or eventually does but I gave up after a few minutes) This can be fixed by deleting all of the Authorities from the self-signed certs (not the certs themselves). So, I'd go to Preferences > Advanced > Certificates (tab) > View Certificates > Authorities and then delete the authorities related to the self-signed certs; the actual certs aren't removed. This fixes the problem until the next 10th upgrade is performed. This also affects Firefox 45.0.1 - though is considerably worse than 46.0.1; it's unusable after 8 upgrades. When I say "unusable" I mean that our site doesn't load, all other websites load and work correctly. This affects Firefox on Mac OS X, CentOS 7/6.6, and Windows 7. The only plugin installed is Firebug Any thoughts as to why this is occurring? Thanks in advance for the help.

Additional System Details

Application

  • User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36

More Information

cor-el
  • Top 10 Contributor
  • Moderator
17589 solutions 159105 answers

See this page for contact information about Security (NSS) and Certificates.

See this page for contact information about Security (NSS) and Certificates. *Community > View Mozilla Cryptography forums<br />https://developer.mozilla.org/Mozilla/Projects/NSS