搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

Learn More

Why does Firefox 32 suddenly not recognize a certificate?

  • 5 个回答
  • 1 人有此问题
  • 33 次查看
  • 最后回复者为 n0diamond

more options

Firefox 32 says that https://rcmail.secure.ne.jp/rcmail-05/ is untrusted: rcmail.secure.ne.jp uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)

Website Identity Website: rcmail.secure.ne.jp Owner: This website does not supply ownership information. Verified by: Not specified

Privacy & History Have I visited this website prior to today? Yes, 114 times

Firefox 31 displayed the site just fine before today.


Internet Explorer 10 says everything is still trusted today: SECOM Trust Systems CO LTD Servision Certification Authority rcmail.secure.ne.jp

SECOM's certificate is issued by http://www.valicert.com/ and valid from 1999 to 2019. Servision's certificate is also issued by http://www.valicert.com/ and valid from 2007 to 2017. rcmail.secure.ne.jp's certificate is issued by Servision and valid from 2014.01.08 to 2015.01.16.

Firefox 32 says that https://rcmail.secure.ne.jp/rcmail-05/ is untrusted: rcmail.secure.ne.jp uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer) Website Identity Website: rcmail.secure.ne.jp Owner: This website does not supply ownership information. Verified by: Not specified Privacy & History Have I visited this website prior to today? Yes, 114 times Firefox 31 displayed the site just fine before today. Internet Explorer 10 says everything is still trusted today: SECOM Trust Systems CO LTD Servision Certification Authority rcmail.secure.ne.jp SECOM's certificate is issued by http://www.valicert.com/ and valid from 1999 to 2019. Servision's certificate is also issued by http://www.valicert.com/ and valid from 2007 to 2017. rcmail.secure.ne.jp's certificate is issued by Servision and valid from 2014.01.08 to 2015.01.16.

被采纳的解决方案

hello n0diamond, mozilla removed support for root certificates with RSA key sizes smaller than 2048 bits for security reasons, SECOM was one of them.

https://wiki.mozilla.org/CA:MD5and1024 https://developer.mozilla.org/en-US/Firefox/Releases/32/Site_Compatibility#Security

在上下文中阅读这个答案 👍 0

所有回复 (5)

more options

Firefox doesn't come with the "Servision Certification Authority" root certificate. If IE has it then export the certificate in IE and import the certificate in the Firefox Certificate Manager. To make it work as a root certificate you need to set the appropriate trust bits when prompted.

由cor-el于修改

more options

Isn't the root SECOM rather than Servision?

Why would Firefox 31 have displayed the page 114 times without a peep?

more options

Both IE and Firefox have SECOM's root certificate. Neither IE nor Firefox has a Servision certificate, at least not that I can find, among roots and intermediates and trusted. I think IE trusts Servision's certificate from SECOM's root, and Firefox 31 used to do the same.

more options

选择的解决方案

hello n0diamond, mozilla removed support for root certificates with RSA key sizes smaller than 2048 bits for security reasons, SECOM was one of them.

https://wiki.mozilla.org/CA:MD5and1024 https://developer.mozilla.org/en-US/Firefox/Releases/32/Site_Compatibility#Security

more options

I see, Internet Explorer 10 has two root certificates for SECOM. One is in SECOM's own name and is 2048 bits. One is in the name of www.valicert.com but has SECOM's name associated in some manner, and is only 1024 bits, so that's the one that was removed in Firefox 32. Servision and rcmail.secure.ne.jp need to be informed to switch to SECOM's newer certificate.