X
Thinta lapha ukuze uye kuveshini yamakhalekhukhwini kusayithi.

Isithangami Sabeseki

Lolu chungechunge lwabekwa kunqolobane. Uyacelwa ubuze umbuzo omusha uma udinga usizo.

How to delete certificate authority from installation folder instead?

Kuphostiwe

Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10?

Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers)

Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient.

upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)

Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10? Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers) Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient. upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)

Eminye Imininingwane Yohlelo

Fakela amapulagi

  • Shockwave Flash 32.0 r0

Isisebenziso

  • I-ejenti Engumsebenzisi: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0

Eminye Imininingwane

cor-el
  • Top 10 Contributor
  • Moderator
17584 izisombululo 159079 izimpendulo
Kuphostiwe

What certificate(s) is this about and who is the issuer?

It shouldn't be necessary to remove/disable builtin certificates. Firefox stores intermediate certificates send by the server in cert9.db in the profile folder.

If this is a problem with security software then you should fix it there.

What certificate(s) is this about and who is the issuer? It shouldn't be necessary to remove/disable builtin certificates. Firefox stores intermediate certificates send by the server in cert9.db in the profile folder. If this is a problem with security software then you should fix it there. *https://support.mozilla.org/en-US/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER
jscher2000
  • Top 10 Contributor
8797 izisombululo 71955 izimpendulo
Kuphostiwe

It's possible that security software added an authority certificate in the past that has expired or is creating other issues. As an alternative to removing an individual certificate, you could blow away the cert9.db file and let Firefox start with just the default certificates. Whether that is more convenient is difficult to say.

But to address your question, I don't think a cert9.db file can be edited (deleting a certificate) from outside Firefox without using a dedicated tool, because it is a SQLite database file. You could take a look at the following, but if you are pretty much done with this project, it may not be worth the effort:

https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil

It's possible that security software added an authority certificate in the past that has expired or is creating other issues. As an alternative to removing an individual certificate, you could blow away the cert9.db file and let Firefox start with just the default certificates. Whether that is more convenient is difficult to say. But to address your question, I don't think a cert9.db file can be edited (deleting a certificate) from outside Firefox without using a dedicated tool, because it is a SQLite database file. You could take a look at the following, but if you are pretty much done with this project, it may not be worth the effort: https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil
cor-el
  • Top 10 Contributor
  • Moderator
17584 izisombululo 159079 izimpendulo
Kuphostiwe
See also: *https://blogs.oracle.com/meena/whats-new-in-nss-312-new-shared-dbs *https://wiki.mozilla.org/NSS_Shared_DB

Umnikazi wombuzo

Would setting up the "Firefox for Enterprise" to centrally manage all users' Firefox help resolving this issue?

Would setting up the "Firefox for Enterprise" to centrally manage all users' Firefox help resolving this issue?
jscher2000
  • Top 10 Contributor
8797 izisombululo 71955 izimpendulo
Kuphostiwe

You could check the Enterprise help pages to see whether they mention how you would remove certificates.

https://support.mozilla.org/products/firefox-enterprise

You could check the Enterprise help pages to see whether they mention how you would remove certificates. https://support.mozilla.org/products/firefox-enterprise