• Solved

Certificate problem accessing an internal company website

I am trying to reach an internal company website (www.gqma.drw), with a certificate chain rooted in a company certificate authority. This works fine in Chrome, and worked… (read more)

I am trying to reach an internal company website (www.gqma.drw), with a certificate chain rooted in a company certificate authority. This works fine in Chrome, and worked in Firefox on my previous computer. But i recently got a new machine, and something somewhere is not quite right. I get an error message looking like this (between the ~~~s):

~~~ Someone could be trying to impersonate the site and you should not continue.

Web sites prove their identity via certificates. Firefox does not trust www.gqma.drw because its certificate issuer is unknown, the certificate is self-signed, or the server is not sending the correct intermediate certificates.

Error code: SEC_ERROR_UNKNOWN_ISSUER

View Certificate ~~~

If i click on the error code, i get these details:

~~~ https://www.gqma.drw/

Peer's Certificate issuer is not recognised.

HTTP Strict Transport Security: false HTTP Public Key Pinning: false

Certificate chain:


BEGIN CERTIFICATE-----

MIICczCCAhigAwIBAgIUcg0ZTKoxYO3E5288qtNnymZ/L6AwCgYIKoZIzj0EAwIw NzEMMAoGA1UEChMDRFJXMRQwEgYDVQQLDAtJU1NAZHJ3LmNvbTERMA8GA1UEAxMI U1NETlMgQ0EwHhcNMjIwMzA5MTQxOTAwWhcNMjQwMzA4MTQxOTAwWjA5MQwwCgYD VQQKEwNEUlcxFDASBgNVBAsMC0lTU0BkcncuY29tMRMwEQYDVQQDEwoqLmdxbWEu ZHJ3MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfXDxyLTebEuPHmneR4faNHoQ PouLPrBqOKnDOW/T+eexbAHcghiZqcQHoHW/Qo/kNQZYPhoHeMZK1ACdvnFTUaOB /zCB/DAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUvuzqIs1O1ioHT3qF+olSZ3dDseEwHwYDVR0jBBgw FoAUjGD9eMez/VkLc5nlNkg/U6dBgmUwNQYIKwYBBQUHAQEEKTAnMCUGCCsGAQUF BzABhhlodHRwOi8vb2NzcC5pc3MuZHJ3L3NzZG5zMB8GA1UdEQQYMBaCCiouZ3Ft YS5kcneCCGdxbWEuZHJ3MC8GA1UdHwQoMCYwJKAioCCGHmh0dHA6Ly9jZXJ0cy5p c3MuZHJ3L3NzZG5zL2NybDAKBggqhkjOPQQDAgNJADBGAiEAtEj7K/C2IHMzh175 9TpPu74YktH/1WJM12zUNIioi30CIQDpLqn09bmTFDgQDkg+0YHu1YSBTlCArWYJ KUxQUa0KPQ==


END CERTIFICATE-----
BEGIN CERTIFICATE-----

MIIB3DCCAYKgAwIBAgIUeLNrkgHyp2GhO6Ee4fyvVbGaUg0wCgYIKoZIzj0EAwIw OjEMMAoGA1UEChMDRFJXMRQwEgYDVQQLDAtJU1NAZHJ3LmNvbTEUMBIGA1UEAxML SVNTIFJvb3QgQ0EwHhcNMTcwMzAxMjA0MzAwWhcNMjcwMjI3MjA0MzAwWjA6MQww CgYDVQQKEwNEUlcxFDASBgNVBAsMC0lTU0BkcncuY29tMRQwEgYDVQQDEwtJU1Mg Um9vdCBDQTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABAjg18NvaBfwKP0BC/9U Cppc1W2rfSqzsY4KCRIAubItoMyQ13zp25KjVg9IF7Uru7cWQcUMvwf4+2Gb/4m4 sFSjZjBkMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMB0GA1Ud DgQWBBSA3cairIJP/ooZLqrq+L9hSNwxczAfBgNVHSMEGDAWgBSA3cairIJP/ooZ Lqrq+L9hSNwxczAKBggqhkjOPQQDAgNIADBFAiAgvGnmTJgMosKFYuRJ7HZMuD/p ZTNapVJltFiGzKAtewIhAJMVQ72U+m7kLNRw6ej7icBQ9d+T4MuhGyJEeYeX5wR4


END CERTIFICATE-----
BEGIN CERTIFICATE-----

MIICYjCCAgigAwIBAgIUDZxs4OPknZA8SgUkWZ7EncHkYVIwCgYIKoZIzj0EAwIw OjEMMAoGA1UEChMDRFJXMRQwEgYDVQQLDAtJU1NAZHJ3LmNvbTEUMBIGA1UEAxML SVNTIFJvb3QgQ0EwHhcNMTcwMzAxMjA0NDAwWhcNMjcwMjI3MjA0NDAwWjA3MQww CgYDVQQKEwNEUlcxFDASBgNVBAsMC0lTU0BkcncuY29tMREwDwYDVQQDEwhTU0RO UyBDQTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABNsaSU2QU1Z5ktRf19DaXZk6 TrPko0TPZFTSYFH9bPxVJ4guUfGnN5nZ7vQajX2NJJLZEL9TZGYSsE8RD/ftcsij ge4wgeswDgYDVR0PAQH/BAQDAgGmMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBSMYP14x7P9WQtzmeU2 SD9Tp0GCZTAfBgNVHSMEGDAWgBSA3cairIJP/ooZLqrq+L9hSNwxczA1BggrBgEF BQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLmlzcy5kcncvc3NkbnMw LwYDVR0fBCgwJjAkoCKgIIYeaHR0cDovL2NlcnRzLmlzcy5kcncvc3NkbnMvY3Js MAoGCCqGSM49BAMCA0gAMEUCIBU5FNCu7ZmE7H1Oautblig4iA5JIgOO+4D/do2c pQ8IAiEAkIdZb5Doptfk1C5uofcvww3E0ZrSG98ZJ2+TW9sz4VA=


END CERTIFICATE-----

~~~

If i click 'View Certificate', i get a chain of three certificates:

  1. Subject common name = *.gqma.drw, issuer common name = SSDNS CA, subject key ID = BE:EC:EA:22:CD:4E:D6:2A:07:4F:7A:85:FA:89:52:67:77:43:B1:E1
  2. Subject common name = SSDNS CA, issuer common name = ISS Root CA, subject key ID = 8C:60:FD:78:C7:B3:FD:59:0B:73:99:E5:36:48:3F:53:A7:41:82:65
  3. Subject common name = ISS Root CA, issuer common name = SS Root CA, subject key ID = 80:DD:C6:A2:AC:82:4F:FE:8A:19:2E:AA:EA:F8:BF:61:48:DC:31:73

If i go to Settings > Privacy & Security > View Certificates > Authorities, i can find both the SSDNS CA and ISS Root CA certificates. As far as i can tell, they are identical - i can open the certificate from 'View Certificate' and the corresponding one from the certificate manager and flip between tabs, and all the details are the same.

I am using Firefox 120.0, via a flatpak, on Ubuntu 22. I have given the flatpak access to /etc/ssl/certs, where my company's internal CA certificates are located.

To me, this seems like it should all work. The server has a certificate signed by an internal CA, which is signed by another internal CA, and both those internal CA certificates are in my certificate manager. So what is going wrong? Is there any way i can debug this?

Asked by twic 4 days ago

Answered by Mike Kaply 2 days ago

  • Locked

Did you know that less than 1% of Thunderbird users fund all the work we do?

Dear Thunderbird/Mozilla, I got the "Want Thunderbird On Your Phone?" email what starts with "Did you know that less than 1% of Thunderbird users fund all the work we do… (read more)

Dear Thunderbird/Mozilla,

I got the "Want Thunderbird On Your Phone?" email what starts with "Did you know that less than 1% of Thunderbird users fund all the work we do? We are completely funded by donations from our global community."

My question is did you know the Thunderbird is getting worse and worse? You would like money from user meanwhile you don't take care what users want?

The new Supernova is a big crap: - multiple folders can't be selected in the same time - Customized icon function also has been removed - TB always makes folders' file corrupted, folders always must be repaired time to time - TB time to time gets stuck during email sending and when I restart TB it removes the email from the Draft so I lose my already written email - TB always turns on f*cking Threads view on all news folder but Thread view is disabled - TB always uses Correspondents column instead of "From", "Recipient" and "Size", I can't set a customized default view. - I always have to restart the TB after a few days because it becomes very slow

Since Supernova has been released we almost each day got calls from our clients and complain about TB why it is getting more useless day by day. So it is a sad story but true.

Thanks, Zsolt

Asked by jonas.zsolt 6 days ago

Last reply by Matt 3 hours ago

  • Solved

NordVPN installed a management profile, now I can't get rid of it

As the title says: NordVPN's Threat Protection installed a browser management profile. Now, I can't seem to get rid of it. I've refreshed FireFox, uninstalled NordVPN u… (read more)

As the title says:

NordVPN's Threat Protection installed a browser management profile. Now, I can't seem to get rid of it. I've refreshed FireFox, uninstalled NordVPN using App Cleaner, and deleted any/all certs for NordVPN Threat Protection from keychain access.

How can I get rid of the management profile? See attached screenshots.

MacOS: 13.4.1 FF: 114.0.2 (64-bit)

Asked by Mike 5 months ago

Answered by TyDraniu 5 months ago

  • Solved
  • Archived

Folder color in 111 version

I've been with yellow folders for several years. In the version that I have now, version 111, no longer works. I was put at userchrome.css the following: @namespace url(h… (read more)

I've been with yellow folders for several years. In the version that I have now, version 111, no longer works. I was put at userchrome.css the following: @namespace url(http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul); .bookmark-item[container], treechildren::-moz-tree-image(container) { fill: gold !important; } treechildren::-moz-tree-image(container, OrganizerQuery_BookmarksToolbar) { fill: black !important; } treechildren::-moz-tree-image(container, OrganizerQuery_BookmarksMenu) { fill: black !important; } treechildren::-moz-tree-image(container, OrganizerQuery_UnfiledBookmarks) { fill: black !important; } treechildren::-moz-tree-image(container, livemark) { fill: orange !important; } .bookmark-item[container][query], treechildren::-moz-tree-image(container, query) { fill: dimgray !important; }

I do not know because it doesn't work now. Maybe version 111 no longer admits it? Do you know how to put the yellow folders?

Asked by Lombard.Lombard 8 months ago

Answered by cor-el 7 months ago

  • Solved
  • Archived

Windows defender detected a Trojan

Recently I did a full scan with Microsoft defender and it detected a file in the “firefox/profiles../cache2/entries” as a trojan:PowerShell/Meterpreter.A (And also someth… (read more)

Recently I did a full scan with Microsoft defender and it detected a file in the “firefox/profiles../cache2/entries” as a trojan:PowerShell/Meterpreter.A (And also something related to gzip I’m sorry that I didn’t take a screenshot of the message but I completely freaked out and deleted it immediately after scanning with the other AVs). I installed malwarebytes and Avast and did a full scan they returned with a no malware has been detected. In the moment I panicked and immediately deleted the file (I should’ve uploaded to virustotal to see its behavior and what it can do and change to my PC if it is indeed malicious). Then I did a full rescan using Microsoft defender and it returned with a 0 threats found. However, I only went to a couple of websites recently which as far as I know are safe such as msi, cpuid, I don’t go to shady websites plus I have ublock origins as an Adblock. My question is as follows how much percentage wise this Trojan is a false positive and if it is a virus how much damage it did (the thing that got me freaked out is that it’s a meterpreter)

Asked by wafeyo2691 11 months ago

Answered by cor-el 11 months ago

  • Solved

youtube videos will not play video only get audio with green screen

Firefox just updated to version 120.0 I hadn't used youtube for a while. When I tried to play youtube videos none of them will play, only get a green screen with audio I… (read more)

Firefox just updated to version 120.0 I hadn't used youtube for a while. When I tried to play youtube videos none of them will play, only get a green screen with audio In troubleshooting mode they will play Refreshing firefox does not fix the problem

Asked by rlbird2 1 week ago

Answered by zeroknight 1 week ago

  • Locked

i reduced to 65% and i STILL cant see the whole page.

Locking this thread.Please continue here: [/questions/1431741] New user here. My web search results dont fill the screen, they always require scrolling down to see the wh… (read more)

Locking this thread.
Please continue here: [/questions/1431741]
New user here. My web search results dont fill the screen, they always require scrolling down to see the whole page at once (as designed). why are the top 2 bands 3 times as tall as the font in them, they use up valuable space. see snip insert below. i have trouble enough with windows 10 without squinting and all this needless scrolling down looking for the rest of the buttons. I use LastPass and its truly infuriating how big the boxes are and how hard to find the information, particularly the "go" buttons. TYIA Shandy

Asked by Shandy 20 hours ago

  • Solved

Unified search/url bar does not search by default

Hi, I've set in my settings to use the unified search+url bar, Also I've set Google as my search engine, but when I type a search request Firefox searchs by default an UR… (read more)

Hi, I've set in my settings to use the unified search+url bar, Also I've set Google as my search engine, but when I type a search request Firefox searchs by default an URL, leading to an error every time, I don't know what to change and Ive tried different settings with no change

Asked by blac 1 day ago

Answered by blac 23 hours ago

  • Solved

how to clear history when save option turned off?

Need to clear all previous activity [history, cache, etc.]. I create websites. Do NOT save history. Option turned off. When I bring up a changed website, I see the previo… (read more)

Need to clear all previous activity [history, cache, etc.]. I create websites. Do NOT save history. Option turned off. When I bring up a changed website, I see the previous version or the one before that half the time. Rebooting PC does not clear it. Am tired of playing browser roulette, trying to find a browser which will A. Show the latest version. [which is being displayed on other people's devices] B. Perform the desired action as designed by the product creator [which works on other servers and devices, and even sometimes on my device using another browser] I am not skilled at seeing physically thru other people's eyes, only imaginatively. My partner is 200 miles away in another state. We don't always see the same, even when the display is identical. Am starting to create 2 versions of sites, a .org and a .com and explaining to people WHY. I think the "don't save" does not work. It merely turns off creating an index of the viewed material and leaves the viewed material in cache. And re-displays the initial data eveytime, no matter how many updates. Thank you.

Asked by mkelley331 19 hours ago

Answered by jscher2000 - Support Volunteer 18 hours ago

  • Solved

Release 115.5.1 undocumented changes to Thunderbird appearance/behavior

Is there any place to find an explanation of the "improvements" made to Thunderbird (and sometimes Firefox) without any warning to users and/or explanation of how they wo… (read more)

Is there any place to find an explanation of the "improvements" made to Thunderbird (and sometimes Firefox) without any warning to users and/or explanation of how they work. After today's update to Thunderbird 115.5.1, the way my Thunderbird screen looks has changed (not imho better, but certainly different. Examples: -- Previously, when I highlighted a message, the text of that message would be shown below and various icons would be shown that I could click on to perform typical tasks (Reply, Reply All, Forward, Delete, etc) -- Now when a message is highlighted, the only way to do anything with it (even to read the bloody thing) I have to right click and display it in either a new tab or a new window.

Can somebody explain [1] why this change is considered an improvement and [b] where I can read about how it works instead of figuring it out by trial and error.

I looked at the Release Notes and couldn't find anything helpful.

I apologize for bothering you if this is not a place for Thunderbird support. But I wanted to give it try before I stop using Thunderbird and just read/write messages directly from Google Gmail.

Thanks for any help anybody can offer.

Asked by Mandy W 19 hours ago

Answered by david 16 hours ago

  • Solved

Bellsouth outbound message quit working.. Ask for password but none I have work

I have been using Bellsouth email for years via Thunderbird but today it keeps asking for a password and none I have work. I tried the Secure Mail Key also. I went into… (read more)

I have been using Bellsouth email for years via Thunderbird but today it keeps asking for a password and none I have work. I tried the Secure Mail Key also. I went into Thunderbird account setting and dont see a place to enter a password. Bellsouth email works fine if I go on line through Yahoo. I can send and receive and there no problem with the email so something in Thunderbird I am guess is holding me up. Is there a place in the Thunderbird account to set a password? All the setting in the account look correct according what I see online. Mike

Asked by Mike Greenway 3 days ago

Answered by Mike Greenway 16 hours ago

  • Locked

NONE OF THE LINKS IN THUNDERBIRD WORK. I have to right click, copy the link, open Chrome and paste the link. The same problem exists with all browsers so the problem is clearly with Thunderbird.

Figure out why links no longer work in Thunderbird. I use the latest version and am running Windows 10 desktop. I've tried Firefox, Edge, Chrome, etc. and the problem exi… (read more)

Figure out why links no longer work in Thunderbird. I use the latest version and am running Windows 10 desktop. I've tried Firefox, Edge, Chrome, etc. and the problem exists with all. Therefore it must be a Thunderbird problem. My donations will begin when this is fixed.

Asked by jimarch 1 month ago

Last reply by Matt 16 hours ago

  • Solved

Spotify webplayer on Firefox is unuseable after updating to latest version

Majority of the songs do not play and I'm given with a pop-up, "Spotify can't play this right now. If you have the file on your computer you can import it." I will play … (read more)

Majority of the songs do not play and I'm given with a pop-up, "Spotify can't play this right now. If you have the file on your computer you can import it."

I will play a song from a playlist and is given that pop-up, it will continue skipping to the next song until it plays, but only for 9-10 seconds until the song mutes, to specify, the dot (when hovered on the progress bar) will still move, indicating that "it's playing".

Some clarifications: 1. I use Spotify Desktop app (windows), Spotify App (android), and Spotify Webplayer on Chrome and Firefox. Everything works just as fine on all of these, except for Spotify Webplayer on Firefox. 2. Skipping to a later timestamp does not unmute the song. 2. I have Spotify Premium 3. I have no VPN 4. I am running Firefox with an ad blocker 5. I am running Chrome with an ad blocker (same ad blocker in Fifefox) 6. I am running Firefox to the latest version (Firefox 119.0.1 (20231106151204))

What I've done so far: 1. Cleared caches and data. 2. Updated my Windows to the latest update available - Win10 v.22H2 3. Signed-out of Spotify for all my devices, then logging-in first on Spotify Desktop (this automatically redirects to Firefox webplayer) 4. Ran Firefox on "Troubleshoot Mode" 5. Un-checked and re-checked "Play DRM content" setting. 6. Disabled and re-enabled the plug-in "Widevine Content Decryption Module by Google Inc". (this plug-in is last udpated on November 17, 4.10.2710.0

I'm including this link from Spotify's Community page.. where two other users, who commented it is only with Firefox (webplayer), are experiencing the same problem as I am. https://community.spotify.com/t5/Desktop-Windows/Spotify-can-t-play-this-right-now-If-you-have-the-file-on-your/m-p/5679914#M123192

Asked by kit 1 week ago

Answered by zeroknight 1 week ago

  • Solved

SMTP settings working fine via testing service but I get error message within Thunderbird

I use a email campaign service called Moosend. Their SMTP details for sending transactional emails have been added to my Thunderbird account settings and tested externall… (read more)

I use a email campaign service called Moosend. Their SMTP details for sending transactional emails have been added to my Thunderbird account settings and tested externally via https://www.smtper.net/ successfully. Unfortunately when I try to send an email within Thunderbird I get an error. I attach images to explain. Key info: My email account is with Google for the domain fitzmaurice.works I use the main address info@fitzmaurice.works for general corrspondence. It is also how I sign into Moosend. Their SMTP server is smtp.mailendo.com and their support recommended I use port 587 I sign in with my Moosend user id and password

Please can you advise why I am getting the error as shown in the third image.

p.s. here is the success message I receved from SMTPer:

This mail was directly sent by smtp.mailendo.com. SMTP host: smtp.mailendo.com Port: 587 Use SLL: True Use Authentication: True Authentication name: info@fitzmaurice.works Authentication password: [not applicable] Email from: info@fitzmaurice.works Email to: robert.fitzmaurice@gmail.com This service is provided by https://smtper.net 

Thanks

Asked by Robert Fitzmaurice 23 hours ago

Answered by david 20 hours ago

  • Solved

SMTP Time out with security set to "normal password" for gmail account.

I just installed Thunderbird for the first time... it didnt even download at 1 time from gmail i am now getting a timeout issue for trying to send my first e mail... I… (read more)

I just installed Thunderbird for the first time...

it didnt even download at 1 time from gmail

i am now getting a timeout issue for trying to send my first e mail... I CANT EVEN ADJUST ANYTHING to be able to try again with more time...

and i thought Thunderbird was supposed to be better than outlook... HMMM

i have the latest version of TB with win 10

i want to be able to send e mail without time out issues this is thanksgiving geez

HELP!!

Asked by Mark 1 week ago

Answered by david 1 week ago

  • Solved

firefox hangs when searching on google or connecting to websites.

I have tried to disable hardware acceleration, refresh firefox, reinstall, and nothing works. It hangs every single time when searching on google or connecting to website… (read more)

I have tried to disable hardware acceleration, refresh firefox, reinstall, and nothing works. It hangs every single time when searching on google or connecting to websites. This really sucks because I have used firefox since the beginning and don't want to have to stop now..

Asked by coreyhooe 3 months ago

Answered by coreyhooe 3 months ago

  • Locked

Fonts are horrible on interface. How to change?

I was a happy camper until V115 stuck its ugly nose into my interface. Fonts on the interface are absolutely terrible and almost unreadable and cause rather severe eye s… (read more)

I was a happy camper until V115 stuck its ugly nose into my interface.

Fonts on the interface are absolutely terrible and almost unreadable and cause rather severe eye strain.

I have tried going to Settings->Language & Appearance->Fonts & Colors->Advance and they will not change.

What am I missing.

I noticed that New Times Roman wasn't available as a font. What gives?

Asked by 1st Armored Division (1971-1973) 1 month ago

Last reply by bneyra 20 hours ago

  • Solved

Cross Origin Request Blocked

I cannot get screen share, webcam share, microphone share to work with my default profile. I get a Cross Origin Request Blocked. If I create a new profile everything wo… (read more)

I cannot get screen share, webcam share, microphone share to work with my default profile. I get a Cross Origin Request Blocked. If I create a new profile everything works as it should even if I install all the same plugins. I have tried changing security..cross_origin in about:config and it makes no difference.

I have a lot of tab groups and sorting in my default profile, so I'd prefer not to have to set that up in a new profile. Importing to a new profile ends me up with the same issue as above.

This error is profile specific and I am wondering if anyone knows the specific profile files that I could regenerate, delete or replace to tackle this cross origin blocking.

Also I've disabled all my plugins, and enhanced tracking protection on the default profile and it still does not work..

Thanks.

Asked by senekj 1 day ago

Answered by zeroknight 1 day ago

  • Solved

espn+ will not let me read articles. But I can watch ESPN+ videos and live shows

I need a fix for my ESPN+ account. I can watch live sports and videos but cannot read ESPN+ articles. Everything works great with Edge and Chrome, so maybe I will have to… (read more)

I need a fix for my ESPN+ account. I can watch live sports and videos but cannot read ESPN+ articles. Everything works great with Edge and Chrome, so maybe I will have to switch browsers.

Asked by vikesprof 1 day ago

Answered by vikesprof 20 hours ago