search

mkaply / cck2wizard

CCK2
Mozilla Public License 2.0
46 stars 9 forks source link

Integrated CA sometimes doesn't work #81

Open Ph4te opened 6 years ago

Ph4te commented 6 years ago

Hi, I'm integrating a CA-certificate via CCK2 and generally it does work as intended. The certificate is integrated in every case, but since Firefox-Update 58.0.1 there are some Clients which get the error message "SEC_ERROR_UNKNOWN_ISSUER". I can find my own CA in the Certificate Manager. But the only way I got it to work, is to remove my CA, restart Firefox and add it again manually. Is this a known problem? Would it be possible, that a new Version of CCK could remove a CA and add it again afterwards? I guess, this would circumvent the problem.

Regards.

mkaply commented 6 years ago

Unfortunately removing CAs is non trivial for the CCK2 (and the cert team said it was unreliable anyway at shutdown).

Are you using Windows?

Ph4te commented 6 years ago

Windows and Linux. But so far this problem only arises on Debian Linux.