Firefox 24.0 on OSX gives erroneous "certificate is not trusted" message
I recently did a "reset" of Firefox (24.0) on my iMac OS x (10.8). Everything appears to be working much better, but I cannot access the Facebook Freecell Project game as Firefox determined "This Connection is Untrusted" I have been going to this game website for a long time and never had a problem before doing the "reset". I can also access the Facebook FreeCell Project game website on both Safari and Chrome without a problem.
Facebook Freecell Project URL https://apps.facebook.com/freecellproject/?fb_source=bookmark_apps&ref=bookmarks&count=0&fb_bmpos=2_0
Technical Details freecellproject.com:45466 uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer)
DigiCert and SSLShopper verified the certificate for this website is valid Symantic verified the certificate for "apps.facebook.com/freecellproject" is valid
Réiteach roghnaithe
You should be able to download this EssentialSSLCA intermediate certificate from this page and install it in the Certificate Manager.
Do NOT set any trust bits, those are only required for root certificates and should never be set for intermediate certificates.
Read this answer in context 👍 1All Replies (6)
hello, the site in question doesn't provide the proper intermediate certificates: http://www.sslshopper.com/ssl-checker.html#hostname=https://freecellproject.com:45466
Réiteach Roghnaithe
You should be able to download this EssentialSSLCA intermediate certificate from this page and install it in the Certificate Manager.
Do NOT set any trust bits, those are only required for root certificates and should never be set for intermediate certificates.
phillipp: the Fcebook FreeCell Project website worked yesterday on Firefox and still works today on Safari & Chrome, so it is only Firefox that doesn't trust it.
cor-el: downloaded and imported the EssentialSSLCA intermediate certificate, but did not fix the trust problem
I've checked the website and I see this certificate chain:
For https://apps.facebook.com/
- *.facebook.com
- VeriSign Class 3 Secure Server CA - G3
- VeriSign Class 3 Public Primary Certification Authority - G5 (built-in)
For https://freecellproject.com:45466/
- freecellproject.com
- EssentialSSL CA
- COMODO Certification Authority (built-in)
Importing the EssentialSSL CA from the above posted web page works for me to load this file.
- https://freecellproject.com:45466/facebook/freecell/php/user.php
You can check in the Certificate Manager if you have imported the EssentialSSL CA certificate correctly.
It should show on the Authorities tab under the "Comodo CA limited" section and have "Software Security Device" in the Security Device column.
If you previously made an exception then you can check the server tab.
If this didn't help then rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file to remove intermediate certificates that Firefox has stored.
You will have to import the EssentialSSL CA certificate another time to see if it works this time.
If that helped to solve the problem then you can remove the renamed cert8.db.old file.
Otherwise you can rename (or copy) the cert8.db.old file to cert8.db to restore the previous intermediate certificates.
Firefox will automatically store intermediate certificates when you visit websites that send such a certificate.
If that didn't help then remove or rename secmod.db (secmod.db.old) as well.
corel: renaming the secmod.db file and reloading the cert solved the problem as I can now access the Facebook FreeCell Project. Thank you very much
You're welcome.