Hi badupgrade, the problem is on the server end, as shown in this report:

https://www.ssllabs.com/ssltest/analyze.html?d=wawf.eb.mil

Fundamentally, the issue is that the military is not working with Mozilla to get its certificate issuing practices approved, so Firefox doesn't trust the certificates to prove that the server claiming to be wawf.eb.mil is really the server it says it is.

If you think it's the correct server, even though that wasn't proven by the certificate, you can create an exception. On the error page, look for the "Advanced" button and then look for an "Add Exception" button. If that button is not there, perhaps because the server uses HSTS (strict HTTPS), then you may wish to check with them on whether this is normal.

Thanks for your assistance. the "Advanced" and "Add exception" buttons do not appear.

I was on the site all morning, then allowed the Mozilla upgrade. While the original issue may be with the .mil server, the problem did not occur until I upgraded the browser.

Thank you so much for your time. It is greatly appreciated!

Hi badupgrade, did your Firefox perform a Refresh during the update? The tell-tale sign would be a folder on your desktop named Old Firefox Data. If you find that, check the modified date/time stamps on the contents. For example, the places.sqlite file stores history so that should be very up-to-date. If the files seem to be from around the time of the update, an option would be to copy the cert8.db file -- which stores certificate exceptions and personal certificates -- from that folder to your current Firefox profile folder in place of the one that doesn't trust the site. More details on that if relevant.

Also, your Firefox reported to the forum that it is version 47, while the current version is 50. Are you sure you ran an official Firefox update??

I ask that because there is a spate of bright orange malware distribution pages abusing the Firefox logo that users are reporting after browsing major sites. The site usually pushes a .js download which causes a Registry-based infection that is difficult to remove.

It did refresh.

In one attempt to follow the instructions, I was told to delete the cert8.db file, which I did. I'm checking for the old firefox folder now.

I am almost 100% positive that I followed the system prompt to update my browser. But you are right, it is 47. I have not switched to Windows 10 and I am behind on browser updates. There is a chance that I needed to go to 47 before going to 50.

I'll check for the .js download for my own sanity. Sounds like I won't be able to fix it, even if I do find it.

I was able to fix the issue of going to the site by adding the web address to the exceptions for "blocked pop ups". Thank you so much for your detailed assistance. I'll be reviewing every word and following your instruction!!! Thanks.

Hi badupgrade, you moved through a lot of topics very quickly there, so I'm not completely sure of the current status of your Firefox.

(1) Copying over the old cert8.db

You can copy the old cert8.db to your current profile folder if needed. The easiest way to find your current profile folder is from within Firefox, either:

• "3-bar" menu button > "?" button > Troubleshooting Information
• (menu bar) Help > Troubleshooting Information
• type or paste about:support in the address bar and press Enter

In the first table on the page, click the "Show Folder" button. This should launch a new window listing various files and folders in Windows Explorer.

Leaving that window open, switch back to Firefox and Exit, either:

• "3-bar" menu button > "power" button
• (menu bar) File > Exit

Pause while Firefox finishes its cleanup, then rename cert8.db to something like cert8.old.

Then copy/paste the cert8.db from the Old Firefox Data folder into your current profile folder. When you start Firefox up again, it should use that certificate store.

(2) Next Update

The currently updated versions of Firefox are:

• Standard release = Firefox 50.1.0 at https://www.mozilla.org/firefox/

• Extended Support Release = Firefox 45.6.0esr -- more information: https://www.mozilla.org/firefox/organizations/

To avoid a repeat Refresh, watch out for any suggestion to speed up Firefox by restoring some default settings -- don't do that.

Oh, this is excellent. I'll be sure to confirm the upgrade with the urls provided.

What has happened after previous upgrades to Firefox is that about 12 hours after the upgrade, I am prompted to upgrade again. I just assumed that I had waited so long that Mozilla provided incremental upgrades.

I will absolutely go to the official website and run the 50.1.0 upgrade. Thanks!!

See also:

• http://iase.disa.mil/pki-pke/getting_started/Pages/index.aspx
• http://iase.disa.mil/pki-pke/getting_started/Pages/windows.aspx
• http://iase.disa.mil/pki-pke/getting_started/Pages/linux-firefox.aspx