Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Site certificate won't stay deleted

  • 2 回覆
  • 1 有這個問題
  • 45 次檢視
  • 最近回覆由 petteyg359

more options

I'm on Firefox 70.0.1 on macOS Mojave 10.14.6, admin user. My problem is that I have an old cert for a site and a new one, and every time I try to delete the old one, it just comes right back. Any ideas for how to make it stay deleted?

I'm on Firefox 70.0.1 on macOS Mojave 10.14.6, admin user. My problem is that I have an old cert for a site and a new one, and every time I try to delete the old one, it just comes right back. Any ideas for how to make it stay deleted?

被選擇的解決方法

Is this about an intermediate certificate that is part of a certificate chain?

You can try to close (Quit) and restart Firefox after deleting this certificate ? You may have to repeat this.

If this doesn't help then delete cert9.db and possibly cert8.db in the profile folder with Firefox closed. Note that this will remove all intermediate certificates that Firefox has cached from visiting websites, so you may have a problem with servers that do not send a complete certificate chain.

You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.

從原來的回覆中察看解決方案 👍 1

所有回覆 (2)

more options

選擇的解決方法

Is this about an intermediate certificate that is part of a certificate chain?

You can try to close (Quit) and restart Firefox after deleting this certificate ? You may have to repeat this.

If this doesn't help then delete cert9.db and possibly cert8.db in the profile folder with Firefox closed. Note that this will remove all intermediate certificates that Firefox has cached from visiting websites, so you may have a problem with servers that do not send a complete certificate chain.

You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.

more options

I have run into this issue, and have a guess at the cause. I expire my client certificates every 90 days. If I install the renewed certificate before uninstalling the expired one, Firefox runs into this stupidity where it simply will not delete either one (and it always defaults to selecting the expired one, so I have to remember to change the selection every time I load the secured site) and I have to resort to the brute-force deletion of cert9.db. Make sure to delete any old certificates for the same DN before installing a new one.

由 petteyg359 於 修改