X
點擊此處開啟此網站的行動版。

技術支援討論區

How to delete certificate authority from installation folder instead?

已張貼

Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10?

Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers)

Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient.

upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)

Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10? Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers) Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient. upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)

額外的系統細節

已安裝的外掛程式

  • Shockwave Flash 32.0 r0

應用程式

  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0

更多資訊

cor-el
  • Top 10 Contributor
  • Moderator
17537 個解決方法 158573 個答案

What certificate(s) is this about and who is the issuer?

It shouldn't be necessary to remove/disable builtin certificates. Firefox stores intermediate certificates send by the server in cert9.db in the profile folder.

If this is a problem with security software then you should fix it there.

What certificate(s) is this about and who is the issuer? It shouldn't be necessary to remove/disable builtin certificates. Firefox stores intermediate certificates send by the server in cert9.db in the profile folder. If this is a problem with security software then you should fix it there. *https://support.mozilla.org/en-US/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER
jscher2000
  • Top 10 Contributor
8773 個解決方法 71727 個答案

It's possible that security software added an authority certificate in the past that has expired or is creating other issues. As an alternative to removing an individual certificate, you could blow away the cert9.db file and let Firefox start with just the default certificates. Whether that is more convenient is difficult to say.

But to address your question, I don't think a cert9.db file can be edited (deleting a certificate) from outside Firefox without using a dedicated tool, because it is a SQLite database file. You could take a look at the following, but if you are pretty much done with this project, it may not be worth the effort:

https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil

It's possible that security software added an authority certificate in the past that has expired or is creating other issues. As an alternative to removing an individual certificate, you could blow away the cert9.db file and let Firefox start with just the default certificates. Whether that is more convenient is difficult to say. But to address your question, I don't think a cert9.db file can be edited (deleting a certificate) from outside Firefox without using a dedicated tool, because it is a SQLite database file. You could take a look at the following, but if you are pretty much done with this project, it may not be worth the effort: https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil
cor-el
  • Top 10 Contributor
  • Moderator
17537 個解決方法 158573 個答案
See also: *https://blogs.oracle.com/meena/whats-new-in-nss-312-new-shared-dbs *https://wiki.mozilla.org/NSS_Shared_DB

提出問題者

Would setting up the "Firefox for Enterprise" to centrally manage all users' Firefox help resolving this issue?

Would setting up the "Firefox for Enterprise" to centrally manage all users' Firefox help resolving this issue?
jscher2000
  • Top 10 Contributor
8773 個解決方法 71727 個答案

You could check the Enterprise help pages to see whether they mention how you would remove certificates.

https://support.mozilla.org/products/firefox-enterprise

You could check the Enterprise help pages to see whether they mention how you would remove certificates. https://support.mozilla.org/products/firefox-enterprise