[Bug 1271513]

Víctor victormontolioferrer at gmail.com
Sat Apr 13 06:01:55 UTC 2019


As noted in the Release Notes of Firefox 52.0 [1], released March 7, 
'Display (but allow users to override) an “Untrusted Connection” error when encountering SHA-1 certificates that chain up to a root certificate included in Mozilla’s CA Certificate Program.'

So, it applies to all certs that have "AC Componentes Informáticos" in
the cert chain.

Untrusted Connection error with code:
"SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED" is expected on all
websites that have certs like https://www.edu.xunta.es/webmail/
(referenced before). Users may feel they have the same error like before
Firefox 51.0.

The only and unique version of Firefox where certs like this one works,
is 51.0, released January 24, which was updated to NSS 3.28.1.

[1] https://www.mozilla.org/en-US/firefox/52.0/releasenotes/

(Websites that have certs with "AC Administración Pública" in the cert
chain ARE NOT impacted, as "AC Administración Pública" is signed with
SHA-256. Example: https://sede.educacion.gob.es/ )

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1271513

Title:
  www.cert.fnmt.es certificates are not included in Mozilla products

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1271513/+subscriptions



More information about the Ubuntu-mozillateam-bugs mailing list