Compare Revisions

Certificate contains the same serial number as another certificate

Revision 837:

Revision 837 by underpass on

Revision 178257:

Revision 178257 by AliceWyman on

Keywords:

Search results summary:

Why Firefox may show you a Secure Connection Failed error when you try to access the configuration page for your router and what to do.

Content:

You may see the following error message when attempting to access a router's configuration page: ;:'''Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number. (Error code: sec_error_reused_issuer_and_serial)''' This article describes the cause of this problem and how to work around it. = Cause = Older routers will sometimes improperly regenerate their security certificates instead of keeping the same one for the life of the device. If you have added a permanent security exception for your router, and if this regeneration is done improperly, Firefox will detect the change as a possible attack. = Solution = The long term solution is to contact your hardware vendor and see if updates are available for your device which fix this problem. = Workaround = If you are confident that no attack has occurred, you can work around the problem by deleting your old exception and using temporary exceptions for subsequent visits to the page: To delete your old exception: # [[T:optionspreferences]] # Select the {menu Advanced} panel. # Click on the {menu Encryption} tab. # Click {button View Certificates} to open the Certificate Manager window. # In the Certificate Manager window click on the {menu Servers} tab. # Find the item that corresponds to the site that generates the error. Note the Certificate Authority (CA) for that server - the CA name appears above the site name. <br/> <br/> [[Image:cffcf8a9e5e507cd1fb8eb64de821ad3-1257730614-636-1.png]] <br/> # Click on the server certificate that corresponds to the site that generates the error and press {button Delete...}. # Click {button OK} when prompted to delete the exception. # Click on the {menu Authorities} tab. # Click on the item that corresponds to the CA that you noted earlier and then press {button Delete...}. # Click {button OK} when prompted to delete the exception. # Click {button OK} close the Certificate Manager window. # [[T:closeOptionsPreferences]]. To add a temporary exception to allow access to the page: {for fx3} # When you go to the page, you will be presented with an error. Click on the '''Or you can add an exception...''' link at the bottom of the error. # Click on {button Add Exception...} to open the Add Security Exception window. # Click {button Get Certificate} to fill in the Certificate Status section of the Add Security Exception window. # Click to '''un-check''' the '''Permanently store this exception''' item. # Click {button Confirm Security Exception} to close the Add Security Exception window. {/for} {for fx35} # When you go to the page, you will be presented with an error. Click on the '''I Understand the Risks''' link at the bottom of the error, then click {button Add Exception...}. # Click on {button Add Exception...} to open the Add Security Exception window. # Click {button Get Certificate} to fill in the Certificate Status section of the Add Security Exception window. # Click to '''un-check''' the '''Permanently store this exception''' item. # Click {button Confirm Security Exception} to close the Add Security Exception window. {/for} The page will load.
You may see the following error when attempting to access a router's configuration page:<br> [[Image:Fx63-SecureConnectionFailed-ReusedIssuer]] {note}'''Note:''' Unlike [[What do the security warning codes mean?|other security warnings]], a [[Troubleshoot the "Secure Connection Failed" error message|Secure Connection Failed]] error page does not allow you to bypass the error.{/note} The error page will include the message, ''Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number. Error code: sec_error_reused_issuer_and_serial''. This article describes the cause of this problem and how to work around it. = Cause = Older routers will sometimes improperly regenerate their security certificates instead of keeping the same one for the life of the device. If you have added a permanent security exception for your router, and if this regeneration is done improperly, Firefox will detect the change as a possible attack. = Solution = A long term solution for older routers is to contact your hardware vendor and see if updates are available for your device which fix this problem. = Workaround = If you are confident that no attack has occurred, you can work around the problem by removing previously saved exceptions generated by the same server or device. Most likely the exception with the duplicate serial number will be on the Servers tab. Look for ones you've added; ignore the ones that list * as the server, which are global distrust entries added by Firefox.<!-- https://support.mozilla.org/en-US/questions/1244449#answer-1183031 --> To delete your old exception: # [[T:optionspreferences]] # Select the {menu Privacy & Security} panel. # Scroll down to the '''Certificates''' section. # Click {button View Certificates} to open the Certificate Manager window. # In the Certificate Manager window click on the {menu Servers} tab. # Find the item that corresponds to the site that generates the error. Note the Certificate Authority (CA) for that server - the CA name appears above the site name. # Click on the server certificate that corresponds to the site that generates the error and press {button Delete...}. # Click {button OK} when prompted to delete the exception. # Click on the {menu Authorities} tab. # Click on the item that corresponds to the CA that you noted earlier and then press {button Delete or Distrust...}. # Click {button OK} when prompted to delete the exception. # Click {button OK} close the Certificate Manager window. # [[T:closeOptionsPreferences]]

Back to History