3 ms·
New version gives SSL_ERROR_UNKNOWN_CA_ALERT on my client certs. Guess I have to go back to Chrome now...
by firebird84 7y ago
New version gives SSL_ERROR_UNKNOWN_CA_ALERT on my client certs. Guess I have to go back to Chrome now...
- edoceo 7y agoJust import your CA
- firebird84 7y agoIt's already installed, that's not it.
- edoceo 7y agoDoes FF use a different cert-store than os? I've frequently had to fiddle with os/app cert-stores to get them to trust. Not just import the cert but the signer too, some times on both sides. I'll likely hit this issue when I upgrade.
- LinuxBender 7y agoIt does have it's own cert store. You can test your sites with testssl.sh [1] to see if they validate correctly. It only depends on openssl and bash. If you have your own self signed CA/certs, then you would have to import them into FF. [1] - https://github.com/drwetter/testssl.sh https://github.com/drwetter/testssl.sh
- firebird84 7y agoTurns out this was an issue with Firefox's automatic certificate selection logic. I changed it to ask me every time instead of automatically selecting certs, and once it saves my selection it's back to normal. I'm not sure how that changed in this release, but it's at least resolvable.