[Ubuntu Wiki] Update of "MozillaTeam/Bugs" by chrisccoulson
Ubuntu Wiki
noreply at ubuntu.com
Sat Nov 26 22:15:23 UTC 2011
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Ubuntu Wiki" for change notification.
The "MozillaTeam/Bugs" page has been changed by chrisccoulson:
http://wiki.ubuntu.com/MozillaTeam/Bugs?action=diff&rev1=70&rev2=71
2. Now ~/tmp/gdb-firefox.txt will contain the info we need to initially process your crash bug. So, please attach that file to your bug report.
Please use the same steps for Thunderbird, but replacing "firefox" with "thunderbird" instead.
+
+ == "Secure Connection Failed" errors ==
+
+ If you see a warning with the title "Secure Connection Failed" and the text "The certificate is not trusted because the issuer certificate is unknown (Error code: sec_error_unknown_issuer)" when visiting a website with a https URL, then this means that Firefox is not able to chain the websites certificate to a trusted CA.
+
+ This could be a problem with the server, or it could be that somebody is impersonating the server. It is generally '''not a bug with Firefox'''
+
+ If a site provides a certificate signed by an intermediate CA (one which is not in the root store, but with a trust chain to an existing root), the server must provide the intermediate certificates. Failure to do this will result in this error.
+
+ === For certificates signed by RapidSSL (Geotrust) ===
+
+ On December 9, 2010, Geotrust updated their certificate signing process and all certificates issued after this date require the installation of the RapidSSL intermediate on the server. Some sites forget to do this, which results in this error. This is a '''bug with the website'''
+
+ See [[http://blog.clickssl.com/2010/12/rapidssl-error-on-firefox-this-connection-is-untrusted/|http://blog.clickssl.com/2010/12/rapidssl-error-on-firefox-this-connection-is-untrusted/]]
+
+ [[https://knowledge.geotrust.com/support/knowledge-base/index?page=content&actp=CROSSLINK&id=SO9557|This]] online validation tool can tell you which intermediate a server is missing
+
+ === Requests for inclusion of new CA's ===
+
+ In some cases when experiencing "unknown issuer" errors when visiting certain sites, it may be tempting to open a bug report to request that the issuer CA is added to the root store shipped with Firefox. Doing this would defeat the whole trust system. There is a '''well defined''' process for CA's to request that their certificate(s) be added and be shipped with Firefox. Details of this can be found at [[https://wiki.mozilla.org/CA:How_to_apply|https://wiki.mozilla.org/CA:How_to_apply]]
+
+ '''We will not bypass this process under any circumstances''', so please '''do not''' make these types of requests. Requests of this type '''will be rejected'''.
== Problems launching external applications ==
More information about the Ubuntu-bugsquad
mailing list