X
Tap here to go to the mobile version of the site.

Support Forum

MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE & unsecure message

Posted

Hi,

I'm not able to access https://pixabay.com/ as I get the message above (question bar) showing. Having checked out Q&A I tried deleting the cert8.db file then re-starting Mozilla, no joy. I am a bit reluctant to do a refresh as I'm unsure how it would affect my system? I am not that computer literate! I did do an SSL check & both their server & info bar url came back as A+.

Around the same time I now also can't access https://personofinterestdiscussion.com/ I did an SSL check & that came up with vulnerabiities. (I made a note of some if needed.) Their overall safety rating is F - grade capped to C . I haven't made any changes to my laptop lately (Windows 7) & haven't had problems accessing either site until a couple of days ago & I just don't know what to do to get back onto both. I have anti virus, anti spyware, anti malware etc installed with no problems, also Mozilla's website protection. I scan my laptop daily. This has came on so suddenly & I really want to get back onto both sites, so any help would be very much appreciated. Thanks!  :)

Hi, I'm not able to access https://pixabay.com/ as I get the message above (question bar) showing. Having checked out Q&A I tried deleting the cert8.db file then re-starting Mozilla, no joy. I am a bit reluctant to do a refresh as I'm unsure how it would affect my system? I am not that computer literate! I did do an SSL check & both their server & info bar url came back as A+. Around the same time I now also can't access https://personofinterestdiscussion.com/ I did an SSL check & that came up with vulnerabiities. (I made a note of some if needed.) Their overall safety rating is F - grade capped to C . I haven't made any changes to my laptop lately (Windows 7) & haven't had problems accessing either site until a couple of days ago & I just don't know what to do to get back onto both. I have anti virus, anti spyware, anti malware etc installed with no problems, also Mozilla's website protection. I scan my laptop daily. This has came on so suddenly & I really want to get back onto both sites, so any help would be very much appreciated. Thanks! :)

Chosen solution

Thank you FredMcD & Tonnes :)

When I came online today I tried the PoI site again and got the same result so then I clicked on 'Advanced' which led me to a message saying there's a problem with their certificate, altho' the SSL test says their certificate is valid until 2019?! I had emailed the owner & they sent a link which led me to 'exceptions' so I altered the 'permission' and now I can access the site again, but with Mozilla showing a grey padlock with orange exclamation mark. The grey white shield notice says it is blocking parts of the page that may not be secure (the images) ...

Tonnes ... both links in the support column showed green.

I hope you don't think I have been a waste of your time and a complete doofus! I am so grateful to you both for your patience & all your help & sharing of knowledge, which hopefully will help me in the future become more PC literate! Many thanks. :)

Read this answer in context 0

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 15.20.20039
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Shockwave Flash 23.0 r0
  • 5.1.50901.0
  • NPWLPG

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0

More Information

FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

Helpful Reply

I had no problem with your links. What error messages were displayed? ----------------- There is security software like Avast, Kaspersky, BitDefender and ESET that intercept secure connections and send their own certificate. http://www.ehow.com/how_11385212_troubleshoot-reset-connection-firefox.html https://support.mozilla.org/en-US/kb/server-not-found-connection-problem https://support.mozilla.org/en-US/kb/firefox-cant-load-websites-other-browsers-can https://support.mozilla.org/en-US/kb/firefox-and-other-browsers-cant-load-websites https://support.mozilla.org/en-US/kb/secure-connection-failed-error-message https://support.mozilla.org/en-US/kb/connection-untrusted-error-message '''http://kb.mozillazine.org/Error_loading_websites''' https://www.bing.com/search?q=web+site+access+denied https://support.mozilla.org/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER '''This Connection is Untrusted''' is sometimes caused because the computer system clock is wrong. Check the time / date / time zone settings.

Question owner

Hi FredMcD,

thanks for replying & for the links. I get MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE for Pixabay & for the PoI forum, I get this ...

Your connection is not secure

The owner of personofinterestdiscussion.com has configured their web site improperly. To protect your information from being stolen, Firefox has not connected to this web site.

I did already check the clock/ime zone etc but all is ok. Security besides Mozilla & system is AVG, Malwarebytes, AOL spyware .. I have had these programmes for some time with no problems until now!

Hi FredMcD, thanks for replying & for the links. I get MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE for Pixabay & for the PoI forum, I get this ... Your connection is not secure The owner of personofinterestdiscussion.com has configured their web site improperly. To protect your information from being stolen, Firefox has not connected to this web site. I did already check the clock/ime zone etc but all is ok. Security besides Mozilla & system is AVG, Malwarebytes, AOL spyware .. I have had these programmes for some time with no problems until now!
FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

It looks like a certificate issue. Try this;

You may have corrupt cert8.db file. cert8.db stores all your security certificate settings

Type about:support in the address bar and press enter.

Under the page logo on the left side, you will see Application Basics. Under this find Profile Folder. To its right press the button Show Folder. This will open your file browser to the current Firefox profile. Now Close Firefox.

Locate the above file. Then rename or delete it. Restart Firefox.

It looks like a certificate issue. Try this; You may have corrupt '''cert8.db''' file. cert8.db stores all your security certificate settings Type '''about:support''' in the address bar and press enter. Under the page logo on the left side, you will see '''Application Basics.''' Under this find '''Profile Folder.''' To its right press the button '''Show Folder.''' This will open your file browser to the current Firefox profile. Now '''Close Firefox.''' Locate the above file. Then rename or delete it. Restart Firefox.

Question owner

Hi FredMcD ...

I did what you suggested & deleted the file, restarted, but I still can't access either site & checking the files again, cert8.db file is back! I just deleted it, it went into the bin which I emptied!

Hi FredMcD ... I did what you suggested & deleted the file, restarted, but I still can't access either site & checking the files again, cert8.db file is back! I just deleted it, it went into the bin which I emptied!
FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

Firefox will create new files when needed, including the cert8.db file. I called for more help.

Firefox will create new files when needed, including the cert8.db file. I called for more help.

Question owner

Ah, so it's made a new file, ok! I thought I was going mad! Thanks so much for your help.

Ah, so it's made a new file, ok! I thought I was going mad! Thanks so much for your help.
Tonnes
  • Locale Leader
246 solutions 1454 answers

One thing you should not forget now is to empty the browser cache. Clear every instance of the affected websites in History using Show All History, and also choose History > Clear Recent History where you can select cache, cookies, etc. You may need to disable and enable SSL scanning or protocol filtering in your antivirus product as well. Finally, revisit or reload the pages using Ctrl+F5.

One thing you should not forget now is to empty the browser cache. Clear every instance of the affected websites in History using Show All History, and also choose History > Clear Recent History where you can select cache, cookies, etc. You may need to disable and enable SSL scanning or protocol filtering in your antivirus product as well. Finally, revisit or reload the pages using Ctrl+F5.

Question owner

I use the no tracking feature so no history shows, but I daily clear cache, cookies etc just done it again as advised. Sorry to seem thick, but I can't find where my SSL scanning or protocol filtering is, not very computer savvy! I just checked both sites again & I can finally get back on Pixabay, but not on the PoI forum!

Edit: I'm not sure but I think when I usually clear the cache & cookies I don't think I clear site preferences, but did this time after your advice.

Could you please advise where to find the SSL scanning or protocol filtering in my AV? The PoI forum has vulnerabilities as I tested (both sites) using SSL site as recommended, but I haven't had problems getting on there before, only when they were having problems themselves quite some time ago.

Thanks very much for your help Tonnes.

I use the no tracking feature so no history shows, but I daily clear cache, cookies etc just done it again as advised. Sorry to seem thick, but I can't find where my SSL scanning or protocol filtering is, not very computer savvy! I just checked both sites again & I can finally get back on Pixabay, but not on the PoI forum! Edit: I'm not sure but I think when I usually clear the cache & cookies I don't think I clear site preferences, but did this time after your advice. Could you please advise where to find the SSL scanning or protocol filtering in my AV? The PoI forum has vulnerabilities as I tested (both sites) using SSL site as recommended, but I haven't had problems getting on there before, only when they were having problems themselves quite some time ago. Thanks very much for your help Tonnes.

Modified by teammachine

Tonnes
  • Locale Leader
246 solutions 1454 answers

If you wrote what AV product you use, I could and have would. :)

Does the How to troubleshoot security error codes on secure websites support article mention your product? Most likely, you should disable and in some cases re-enable the (or a similar) feature.

The Pol forum page contains mixed content so that may be the reason at this point, though it should still display properly.

If you wrote what AV product you use, I could and have would. :) Does the [[How to troubleshoot the error code "SEC_ERROR_UNKNOWN_ISSUER" on secure websites]] support article mention your product? Most likely, you should disable and ''in some cases'' re-enable the (or a similar) feature. The Pol forum page contains mixed content so that may be the reason at this point, though it should still display properly.

Question owner

Sorry Tonnes,

I have AVG Internet Security product version 2015.0.6201

(I don't have the listed Avast, Bitdefender, Bullguard, ESET, Kaspersky)

I also have AOL Superanti-spyware version 6.0.1204 Malwarebytes Anti Malware version 2.2.1.1043 Malwarebytes Anti-exploit version 1.9.1.1235

Thanks

Sorry Tonnes, I have AVG Internet Security product version 2015.0.6201 (I don't have the listed Avast, Bitdefender, Bullguard, ESET, Kaspersky) I also have AOL Superanti-spyware version 6.0.1204 Malwarebytes Anti Malware version 2.2.1.1043 Malwarebytes Anti-exploit version 1.9.1.1235 Thanks
FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

Start Firefox in Safe Mode {web Link} by holding down the <Shift>
(Mac=Options)
key, and then starting Firefox. A small dialog should appear. Click Start In Safe Mode (not Refresh).

Is the problem still there?


Start your Computer in safe mode with networking. Then start Firefox. Try Safe websites. Is the problem still there?

Starting The Computer In Safe Mode;
Free Online Encyclopedia

Start '''[https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Firefox in Safe Mode]''' {web Link} by holding down the '''<Shift><br> ''(Mac=Options)'' ''' key, and then starting Firefox. A small dialog should appear. Click '''Start In Safe Mode''' (not Refresh). Is the problem still there? ------------------ Start your '''Computer''' in safe mode with networking. Then start Firefox. Try '''Safe''' websites. Is the problem still there? '''[http://encyclopedia2.thefreedictionary.com/Linux+Safe+Mode Starting The Computer In Safe Mode;<br>Free Online Encyclopedia]'''

Question owner

Thanks FredMcD ...

I'll do that tomorrow, it's getting late here (UK) so I'll report back tomorrow, probably evening, my time.

Thanks to you & Tonnes for your help. :)

Good night. :)

Thanks FredMcD ... I'll do that tomorrow, it's getting late here (UK) so I'll report back tomorrow, probably evening, my time. Thanks to you & Tonnes for your help. :) Good night. :)
Tonnes
  • Locale Leader
246 solutions 1454 answers

You’re welcome and good night/morning. ;)

Apparently AVG isn’t able to scan SSL connections so that would be no issue.

You could however check and update exclusions in Malwarebytes Anti-exploit if needed, or uninstall it entirely. For one, I don’t trust it, reading back some reports; another thing is you should never use more than one security product (at least with the same purpose/features) on one system. Can you uninstall it and see what happens?

You’re welcome and good night/morning. ;) Apparently AVG isn’t able to scan SSL connections so that would be no issue. You could however check and update [https://support.malwarebytes.com/customer/en/portal/articles/1833579-how-do-i-stop-malwarebytes-anti-exploit-from-blocking-a-program-that-i-trust-?b_id=6440 exclusions] in Malwarebytes Anti-exploit if needed, or uninstall it entirely. For one, I don’t trust it, reading back [https://forum.kaspersky.com/index.php?s=f08372a3ccdac566d5f5effacadca615&showtopic=328205 some reports]; another thing is you should never use more than one security product (at least with the same purpose/features) on one system. Can you uninstall it and see what happens?

Question owner

Thanks again FredMcD & Tonnes for all your help & patience. :)

FredMcD ... I started Firefox in safe mode, but still can't get on PoI forum. The other site is now fine. I'll try starting the computer in safe mode & will report back.

Tonnes ... thanks for letting me know about AVG & SSL scanning. I checked Malwarebytes Anti-exploit and it doesn't show any exclusions?! Neither does the other one! Re: uninstalling, will have to double check as I think I am paying for one (or both?!) head is a bit sieve like at the mo', a lot going on! Thanks for advice about running similar programmes. Of the two Malwarebytes, if I'm not paying for anti-exploit I'll try uninstalling and see if that makes a difference? Will report back!

Thanks again FredMcD & Tonnes for all your help & patience. :) FredMcD ... I started Firefox in safe mode, but still can't get on PoI forum. The other site is now fine. I'll try starting the computer in safe mode & will report back. Tonnes ... thanks for letting me know about AVG & SSL scanning. I checked Malwarebytes Anti-exploit and it doesn't show any exclusions?! Neither does the other one! Re: uninstalling, will have to double check as I think I am paying for one (or both?!) head is a bit sieve like at the mo', a lot going on! Thanks for advice about running similar programmes. Of the two Malwarebytes, if I'm not paying for anti-exploit I'll try uninstalling and see if that makes a difference? Will report back!

Modified by teammachine

Question owner

FredMcD ... I tried starting the computer in safe mode and (probably me!) it went into repair mode instead, FF 25 minutes later I finally got a message saying it couldn't repair automatically ! re-started, tried again but still no PoI forum access.

Tonnes ... I checked & I've paid for both Malwarebytes programmes! So, ?!? (I have had PUP secured by M & malicious virus secured by AVG at different times.)

I might try & contact the owners of the PoI site, see if anyone else is having problems. Their SSL server test reported vulnerabilities & their rating was poor- grade capped to C overall F.

If I do the Firefox refresh, how will it affect any programmes installed?

Thanks to both of you for your continued help & patience. I'll try & return later, if not, tomorrow. :)

FredMcD ... I tried starting the computer in safe mode and (probably me!) it went into repair mode instead, FF 25 minutes later I finally got a message saying it couldn't repair automatically ! re-started, tried again but still no PoI forum access. Tonnes ... I checked & I've paid for both Malwarebytes programmes! So, ?!? (I have had PUP secured by M & malicious virus secured by AVG at different times.) I might try & contact the owners of the PoI site, see if anyone else is having problems. Their SSL server test reported vulnerabilities & their rating was poor- grade capped to C overall F. If I do the Firefox refresh, how will it affect any programmes installed? Thanks to both of you for your continued help & patience. I'll try & return later, if not, tomorrow. :)
FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

If I do the Firefox refresh, how will it affect any programmes installed?

Normally installed programs run independent from each other. Programs written by the same programmers may share common files. And there are also plugins, like flash.

'''''If I do the Firefox refresh, how will it affect any programmes installed?''''' Normally installed programs run independent from each other. Programs written by the same programmers may share common files. And there are also plugins, like flash.
Tonnes
  • Locale Leader
246 solutions 1454 answers

Hmm… I typed a piece of text but think it’s best if you try this first:

  1. Visit this page. Are both links in the Support column green? Do some more testing if you like (I think you do). :)
  2. Open your profile folder: go to Help > Troubleshooting Information or about:support and click Show folder.
  3. Close Firefox.
  4. Move the file SiteSecurityServiceState.txt out of the profile folder to another place.
  5. Retry https://personofinterestdiscussion.com/
Hmm… I typed a piece of text but think it’s best if you try this first: # Visit [https://projects.dm.id.lv/Public-Key-Pins_test this page]. Are both links in the Support column green? Do some more testing if you like (I think you do). :) # Open your profile folder: go to Help > Troubleshooting Information or about:support and click ''Show folder''. # Close Firefox. # Move the file ''SiteSecurityServiceState.txt'' out of the profile folder to another place. # Retry https://personofinterestdiscussion.com/

Chosen Solution

Thank you FredMcD & Tonnes :)

When I came online today I tried the PoI site again and got the same result so then I clicked on 'Advanced' which led me to a message saying there's a problem with their certificate, altho' the SSL test says their certificate is valid until 2019?! I had emailed the owner & they sent a link which led me to 'exceptions' so I altered the 'permission' and now I can access the site again, but with Mozilla showing a grey padlock with orange exclamation mark. The grey white shield notice says it is blocking parts of the page that may not be secure (the images) ...

Tonnes ... both links in the support column showed green.

I hope you don't think I have been a waste of your time and a complete doofus! I am so grateful to you both for your patience & all your help & sharing of knowledge, which hopefully will help me in the future become more PC literate! Many thanks. :)

Thank you FredMcD & Tonnes :) When I came online today I tried the PoI site again and got the same result so then I clicked on 'Advanced' which led me to a message saying there's a problem with their certificate, altho' the SSL test says their certificate is valid until 2019?! I had emailed the owner & they sent a link which led me to 'exceptions' so I altered the 'permission' and now I can access the site again, but with Mozilla showing a grey padlock with orange exclamation mark. The grey white shield notice says it is blocking parts of the page that may not be secure (the images) ... Tonnes ... both links in the support column showed green. I hope you don't think I have been a waste of your time and a complete doofus! I am so grateful to you both for your patience & all your help & sharing of knowledge, which hopefully will help me in the future become more PC literate! Many thanks. :)

Modified by teammachine

FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

That was very good work. Well done. Please flag your last post as Solved Problem so others will know.

That was very good work. Well done. Please flag your last post as '''Solved Problem''' so others will know.
Tonnes
  • Locale Leader
246 solutions 1454 answers

No problem, as long as you keep reading and follow suggestions. :)

Important to know: did you try the steps above (delete the file) before what you wrote above? If not, what changed things so you could add an exception today using Advanced, or was it possible earlier? (I thought you weren’t able to.)

The grey padlock with an orange/yellow exclamation mark is fine for this page as it contains mixed content as described in the How do I tell if my connection to a website is secure? article. However, you should not need to add an exception for this website, as the fault is at your end, not theirs, so I think you haven’t tried the steps.

In that case, if you have added a permanent exception by leaving the checkmark next to Permanently store this exception, could you remove it and try the steps?

First, open Options > Advanced > Certificates > View Certificates > Servers tab - you’ll probably find the website under The USERTRUST network, where you can delete it. Then retry the page so you should see the error again (you may need to reload using Ctrl-F5 and restart Firefox), then close Firefox, delete the file and retry.

No problem, as long as you keep reading and follow suggestions. :) Important to know: did you try the steps above (delete the file) before what you wrote above? If not, what changed things so you could add an exception today using Advanced, or was it possible earlier? (I thought you weren’t able to.) The grey padlock with an orange/yellow exclamation mark is fine for this page as it contains mixed content as described in the [[How do I tell if my connection to a website is secure?]] article. However, you should ''not'' need to add an exception for this website, as the fault is at your end, not theirs, so I think you haven’t tried the steps. In that case, if you have added a ''permanent'' exception by leaving the checkmark next to ''Permanently store this exception'', could you remove it and try the steps? First, open Options > Advanced > Certificates > View Certificates > Servers tab - you’ll probably find the website under The USERTRUST network, where you can delete it. Then retry the page so you should see the error again (you may need to reload using Ctrl-F5 and restart Firefox), then close Firefox, delete the file and retry.