6 ms·

To remove it Firefox: Tools > Options > Advanced > Encryption > View Certificates > Authorities > find and delete the CNNIC entry IE: Tools > Internet Options

To remove it Firefox: Tools > Options > Advanced > Encryption > View Certificates > Authorities > find and delete the CNNIC entry IE: Tools > Internet Options > Content > Publishers > Trusted Root Certification Authorities > find and delete the CNNIC entry Chrome: Wrench > Options > Under the Hood > Manage Certificates > Trusted Root Certification Authorities > find and delete the CNNIC entry Note, removing it from either Chrome or IE will remove it from both. [Edit: added instructions for Chrome and IE]

defen 17y ago
I followed your deletion instructions on Firefox on OS X, but it keeps coming back like some sort of zombie totalitarian (Hitler?) Even after restarting Firefox, if I go back to the dialog, CNNIC is back.
- deleted 17y ago
  [deleted]
- sandGorgon 17y ago
  please file a bug - this should not happen
- AndrewHampton 17y ago
  Ha, this caught me off guard too, but even though it's still listed after restarting Firefox, the permissions have been removed. If you select the cert and click edit, you can see the permission boxes are no longer checked where they were before. See https://bugzilla.mozilla.org/show_bug.cgi?id=173729 https://bugzilla.mozilla.org/show_bug.cgi?id=173729 for details. [Edit: At least this is the case on Windows. File a bug report as sandGorgon suggested if that's not the case.]
orangecat 17y ago
Mac OS X (affects Safari and presumably other WebKit-based browsers like Chrome): run the "Keychain Access" app in /Applications/Utilities. Select "System Roots" from the upper left pane, then "Certificates" from the lower left. A long list of root CAs should appear in the middle pane, double click "CNNIC ROOT" to edit, expand the "Trust" triangle, change to "Never Trust", close, and authenticate if needed.
est 17y ago
Remove it won't do anything, if you visit https://www.enum.cn/ https://www.enum.cn/ it will come back to your system. You have to disable it and add it to Untrusted.
- AndrewHampton 17y ago
  After just following the steps above, visiting enum.cn shows the "This Connection is Untrusted" dialogue for me on Windows. According to the bug report here: https://bugzilla.mozilla.org/show_bug.cgi?id=173729 https://bugzilla.mozilla.org/show_bug.cgi?id=173729 I believe the steps above are all you should need to do.

defen 17y ago

I followed your deletion instructions on Firefox on OS X, but it keeps coming back like some sort of zombie totalitarian (Hitler?) Even after restarting Firefox, if I go back to the dialog, CNNIC is back.

deleted 17y ago
[deleted]
sandGorgon 17y ago
please file a bug - this should not happen
AndrewHampton 17y ago
Ha, this caught me off guard too, but even though it's still listed after restarting Firefox, the permissions have been removed. If you select the cert and click edit, you can see the permission boxes are no longer checked where they were before. See https://bugzilla.mozilla.org/show_bug.cgi?id=173729 https://bugzilla.mozilla.org/show_bug.cgi?id=173729 for details. [Edit: At least this is the case on Windows. File a bug report as sandGorgon suggested if that's not the case.]

orangecat 17y ago

Mac OS X (affects Safari and presumably other WebKit-based browsers like Chrome): run the "Keychain Access" app in /Applications/Utilities. Select "System Roots" from the upper left pane, then "Certificates" from the lower left. A long list of root CAs should appear in the middle pane, double click "CNNIC ROOT" to edit, expand the "Trust" triangle, change to "Never Trust", close, and authenticate if needed.

est 17y ago

Remove it won't do anything, if you visit https://www.enum.cn/ https://www.enum.cn/ it will come back to your system. You have to disable it and add it to Untrusted.

AndrewHampton 17y ago
After just following the steps above, visiting enum.cn shows the "This Connection is Untrusted" dialogue for me on Windows. According to the bug report here: https://bugzilla.mozilla.org/show_bug.cgi?id=173729 https://bugzilla.mozilla.org/show_bug.cgi?id=173729 I believe the steps above are all you should need to do.