Showing questions tagged: Show all questions
  • Archived

Latest Firefox update 37.0.2 does not recognize a valid certificate.

The latest update of Firefox, 37.0.2, will no longer work with our ERP system. It tell us: The page you are trying to view cannot be shown because the authenticity of th… (read more)

The latest update of Firefox, 37.0.2, will no longer work with our ERP system. It tell us:

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

But our site does in fact have a valid Go-Daddy certificate. Even though this site is internal and behind our firewall and not visible to the outside world we choose to connect using SSL. Internet Explorer shows the certificate chain and also shows:

This certificate is OK.

I use to like Firefox better than IE but now I think the best course of action is to remove Firefox and never use it again. I do not need to deal with this kind of garbage.

John Nora

Asked by JPNORA 5 years ago

Last reply by FredMcD 5 years ago

  • Archived

Firefox signature algorithm mismatch

Running Firefox 39.0 on Windows 7 and get the following error when attempting to connect to some websites: The signature algorithm in the signature field of the certifica… (read more)

Running Firefox 39.0 on Windows 7 and get the following error when attempting to connect to some websites: The signature algorithm in the signature field of the certificate does not match the algorithm in its signatureAlgorithm field. (Error code: mozilla_pkix_error_signature_algorithm_mismatch) Got this today when trying to connect to Google.com

Asked by ryanhundt 4 years ago

Last reply by guigs 4 years ago

  • Archived

Many secure sites fail to load when behind firewall with IPS.

In our organization we are using a firewall which has an Intrusion Prevention System. The IPS has a certificate which must be imported into the browsers to be able to loa… (read more)

In our organization we are using a firewall which has an Intrusion Prevention System. The IPS has a certificate which must be imported into the browsers to be able to load SSL websites. This allows the IPS to inspect the contents of secure packets for any malware or viruses. The problem is this isn't working very well with Firefox. Most secure sites bring up one of the following errors:

Secure Connection Failed The connection to <website> was interrupted while the page was loading. The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

OR

Secure Connection Failed An error occurred during a connection to <website>. SSL peer rejected a handshake message for unacceptable content. (Error code: ssl_error_illegal_parameter_alert) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

Does anyone have any suggestions on how to get Firefox to work in this environment?

Asked by Chris_00 4 years ago

Last reply by FredMcD 4 years ago

  • Archived

Problem when trying to access facebook. Error code: ssl_error_access_denied_alert

I get this message whenever I try to enter facebook: An error occurred during a connection to www.facebook.com. Peer received a valid certificate, but access was denied. … (read more)

I get this message whenever I try to enter facebook: An error occurred during a connection to www.facebook.com. Peer received a valid certificate, but access was denied. (Error code: ssl_error_access_denied_alert)

I've tried a number of solutions including changing security.tls.version.max to 0.

Anyway to fix this other than formatting the whole drive (which seems a bit exaggerated)?

Asked by Samuel Maclay 4 years ago

Last reply by guigs 4 years ago

  • Archived

Is the URL: ce.lijit.com a legitimate firefox certificate to be installed?

My security carrier says "cannot guanantee authenticity of the domain to which encrypted connection is established. Application: Firefox, URL: ce.lijit.com. Authorizat… (read more)

My security carrier says "cannot guanantee authenticity of the domain to which encrypted connection is established. Application: Firefox, URL: ce.lijit.com. Authorization for this certificate chain was cancelled. Do I allow or disconnect?

Asked by newtothesystem 4 years ago

Last reply by Seburo 4 years ago

  • Archived

SSL certificate expired -- "I know the risk" is not an option. How do I access the site?

I got the "This Connection is Untrusted" error on a website I use daily. In the past, there have been 2 options at the bottom of the page -- "Get me out of here" and "I … (read more)

I got the "This Connection is Untrusted" error on a website I use daily. In the past, there have been 2 options at the bottom of the page -- "Get me out of here" and "I know the risk". Choosing "I know the risk" lets you access the sight, but it is no longer an option. How do I access sites with expired certificates? I need to work daily with several NYS websites that have expired certificates.

Asked by MEH1 4 years ago

Last reply by Mark Schmidt 4 years ago

  • Archived

Website Verification and Passwords.

Is there a way to send a request or verification ticket to either the company's website or Mozilla for SSL certification? Like, sending a link to DigiCert Inc. or Google … (read more)

Is there a way to send a request or verification ticket to either the company's website or Mozilla for SSL certification? Like, sending a link to DigiCert Inc. or Google Inc. Authority? I want to be sure that my connection to the website is private and secure. Furthermore, if the web page does not provide an SSL certification or verified website approval, would the passwords that I saved through Mozilla Firefox password manager be compromised or will they be secure even visiting a website that has no SSL certificate or verification? Please answer these two questions as soon as possible. Thank you.

Asked by Brando Mettout 4 years ago

Last reply by cor-el 4 years ago

  • Archived

I can not find my private key. Can you tell me how to find it?

I am trying to download a Certificate under View My Certificates. There is none there. I get a prompt in the process that says: This personal certificate can't be instal… (read more)

I am trying to download a Certificate under View My Certificates. There is none there. I get a prompt in the process that says:

This personal certificate can't be installed because you do not own the corresponding private key which was created when the certificate was requested.

How do I find or own the corresponding private key?

Asked by oleysassone 4 years ago

Last reply by guigs 4 years ago

  • Archived

Multiple certificate authorities from the same domain causes Firefox to freeze

The QA team at my company performs tons of upgrade testing and, on each upgrade, the software generates new self-signed SSL certificates on our server. After each upgrade… (read more)

The QA team at my company performs tons of upgrade testing and, on each upgrade, the software generates new self-signed SSL certificates on our server. After each upgrade, they access the site with Firefox and need to make an exception for the self-signed cert (on the "Your connection is not secure" screen).

After about 10 upgrades (and accepting the new self-signed certs), Firefox (46.0.1) begins to load the page more slowly. Each time after that becomes exponentially slower: - 11th time takes a couple of seconds to load - 12th takes 10+ seconds - 13th takes 30+ seconds, and finally; - 14th just doesn't load (or eventually does but I gave up after a few minutes)

This can be fixed by deleting all of the Authorities from the self-signed certs (not the certs themselves). So, I'd go to Preferences > Advanced > Certificates (tab) > View Certificates > Authorities and then delete the authorities related to the self-signed certs; the actual certs aren't removed. This fixes the problem until the next 10th upgrade is performed.

This also affects Firefox 45.0.1 - though is considerably worse than 46.0.1; it's unusable after 8 upgrades. When I say "unusable" I mean that our site doesn't load, all other websites load and work correctly.

This affects Firefox on Mac OS X, CentOS 7/6.6, and Windows 7. The only plugin installed is Firebug

Any thoughts as to why this is occurring?

Thanks in advance for the help.

Asked by stone-joe 4 years ago

Last reply by cor-el 4 years ago

  • Archived

Why can I not add a security exception for a download.

I'm attempting to download this file but it has an Error code: SSL_ERROR_BAD_CERT_DOMAIN https://files.vagrantup.com/precise32.box There is no option to add an exception.… (read more)

I'm attempting to download this file but it has an Error code: SSL_ERROR_BAD_CERT_DOMAIN https://files.vagrantup.com/precise32.box

There is no option to add an exception.

The steps I have tried to fix this are: 1) Disabled all plugins and addons 2) Pasted the URL, domain name (both the issuing website and the domain of the URL) in chrome://pippki/content/exceptionDialog.xul (with and without clicking "Get Certificate") 3) Manually entered the above details into: Tools > Options > Advanced > Certificates > View Certificates > Servers > Add Exception (with and without clicking "Get Certificate") 4) Deleted the file cache 5) Disabled and then removed anti virus software and firewall 6) Emptied my hosts file 7) Renamed cert8.db 8) Created a new profile 9) Removed and reinstalled Firefox

I'm running FF 47.0

Please let me know if I should file a bug.

Asked by Andy Gee 3 years ago

Last reply by cor-el 3 years ago

  • Archived

Trusting the Windows local user certificate store

Is there a way to have Mozilla trust the local Windows user certificate store? We have deployed user certificates as non-exportable so the only way to get them is to ref… (read more)

Is there a way to have Mozilla trust the local Windows user certificate store? We have deployed user certificates as non-exportable so the only way to get them is to reference the Windows store directly. Exporting them and importing them into Mozilla is not an option.

Asked by jmac978 3 years ago

Last reply by philipp 3 years ago

  • Archived

Permanently Store self-signed certificates broken in 49.0.2

When I navigate to one of our internal SSL-enabled websites that uses a self-signed certificate, 49.0.2 does nothing upon clicking CONFIRM SECURITY EXCEPTION when PERMANE… (read more)

When I navigate to one of our internal SSL-enabled websites that uses a self-signed certificate, 49.0.2 does nothing upon clicking CONFIRM SECURITY EXCEPTION when PERMANENTLY STORE THIS EXCEPTION option is checked. Click on that button does nothing and it is impossible to navigate to the site until the option is deselected. I've reinstalled 48.0.2 and the issue disappeared.

Asked by stringrazor 3 years ago

Last reply by soundwave 3 years ago

  • Archived

cert8.db not copying from \browser\defaults\profile to user's profile.

Hi guys, I hope that someone may be able to help? I am currently working on deploying Firefox 50 in an enterprise environment. I have a few SSL Certificates that are requ… (read more)

Hi guys,

I hope that someone may be able to help?

I am currently working on deploying Firefox 50 in an enterprise environment. I have a few SSL Certificates that are required to be used. These are the steps I've taken so far:

  • Generated the cert8.db with a sample profile
  • Copied the cert8.db into C:\Program Files\Mozilla Firefox\browser\defaults\profile
  • Created new profile... profile loaded the correct cert8.db

I then found the cert_override.txt file (needed for a self signed cert) and copied it to the same directory, deleted profile and created another one. The problem is this time it didn't copy the file over...

I re-installed Firefox and deleted profiles many times I now cannot get the new profiles to copy files from \browser\defaults\profile anymore... Has anyone experiencing anything like this, or have any ideas on how to resolve...

It's worth noting that if I manually copy these files into the Firefox profile after generation the certs work as expected.

Asked by TJohnson93 3 years ago

Last reply by Tonnes 3 years ago

  • Archived

ill placed certificates names in mozilla still there.What to do?

mozilla security blog mar 25 2011 https://blog.mozilla.org/security/2011/03/25/comodo-certificate-issue-follow-up This is a follow-up to the previous Mozilla report about… (read more)

mozilla security blog mar 25 2011 https://blog.mozilla.org/security/2011/03/25/comodo-certificate-issue-follow-up This is a follow-up to the previous Mozilla report about the fraudulent certificates issued by Comodo last week. On 15th March 2011, a RA partner of the Comodo CA suffered an internal security breach (Comodo incident report). The attacker used the RA’s account with Comodo to cause 9 fraudulent certificates to be issued. The domain names of the certificates were as follows:

   addons.mozilla.org
   login.live.com
   mail.google.com
   www.google.com
   login.yahoo.com (x3)
   login.skype.com
   global truste

(and the rest, see link) I still found all certifacate-domain-names in mozilla I only deleted global trustee. What to do with the rest ?

Asked by luke5 3 years ago

Last reply by James 3 years ago

  • Archived

Why does this keep happening only with firefox, no other browswer have this issue?

Only your browser does this, about to drop all use of Firefox: Your browser drops connection all the time it does it to the following web site as well: https://ticketmast… (read more)

Only your browser does this, about to drop all use of Firefox: Your browser drops connection all the time it does it to the following web site as well:

https://ticketmaster.terix.com/ticketmaster/

Secure Connection Failed

An error occurred during a connection to iob.terix.com. A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot. Error code: SEC_ERROR_PKCS11_DEVICE_ERROR

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

Asked by jodygsxr1k 3 years ago

Last reply by cor-el 3 years ago

  • Archived

Getting box saying "Cannot guarantee authenticity of the domain to which encrypted connection is established (blah blah) certificate not up to date.

This is about Firefox not from Firefox. Seems to originate from Entrust.net which I never applied for. Trouble started after I downloaded Windows 10 and caught a bunch of… (read more)

This is about Firefox not from Firefox. Seems to originate from Entrust.net which I never applied for. Trouble started after I downloaded Windows 10 and caught a bunch of trouble from Yahoo, then tried to update Java and got extra sneaky stuff with it. I use Kaspersky, which is apparently sending the message about you and they have taken over my computer trying to fix everything for several hours yesterday and today but still getting the message that Firefox certificate is basically expired. Whatever a certificate is. BTW box with message is still up in the corner, don't know if you can see it.

Asked by Bluesierra26 3 years ago

Last reply by FredMcD 3 years ago