We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Търсене в помощните статии

Избягвайте измамите при поддръжката. Никога няма да ви помолим да се обадите или изпратите SMS на телефонен номер или да споделите лична информация. Моля, докладвайте подозрителна активност на "Докладване за злоупотреба".

Научете повече

Windows Certificate Authority

  • 1 отговор
  • 1 има този проблем
  • 22 изгледи
  • Последен отговор от guigs

more options

My company has a Windows internal certificate authority (2012R2) I am trying to find documentation on what settings are needed to generate certificates compliant for use with Firefox.

Certificates created using this internal CA get the below error when using Firefox, although IE and Chrome do not. Hopefully, there is some documentation on what is needed to generate SSL certificate compliant with Firefox standards.

SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED The certificate was signed using a signature algorithm that is disabled because it is not secure.

My company has a Windows internal certificate authority (2012R2) I am trying to find documentation on what settings are needed to generate certificates compliant for use with Firefox. Certificates created using this internal CA get the below error when using Firefox, although IE and Chrome do not. Hopefully, there is some documentation on what is needed to generate SSL certificate compliant with Firefox standards. SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED The certificate was signed using a signature algorithm that is disabled because it is not secure.

Всички отговори (1)

more options

Can you use a different algorithm to sign your self-signed certificate?

This is the certificate root store policy for reference https://www.mozilla.org/en-US/about/g.../#maintenance

I would read almost all of it, but it looks like that error is running into this section -> 5.1 Algorithms

If I can't help solve this certificates@mozilla.org might. :-)

Променено на от guigs