Version 17 Won't Accept Security Certificate
-
- Posts: 9
- Joined: March 28th, 2010, 10:36 am
Version 17 Won't Accept Security Certificate
When doing on-line banking with FF 17, I am blocked from accessing bill pay because the security certificate will not be accepted.
"xxxxxbanking.com uses an invalid security certificate.
The certificate is only valid for www.xxxxxbanking.com
(Error code: ssl_error_bad_cert_domain)"
Version 16 (portable) has no problem, works fine. Something's wrong in 17.
"xxxxxbanking.com uses an invalid security certificate.
The certificate is only valid for www.xxxxxbanking.com
(Error code: ssl_error_bad_cert_domain)"
Version 16 (portable) has no problem, works fine. Something's wrong in 17.
- patrickjdempsey
- Posts: 23686
- Joined: October 23rd, 2008, 11:43 am
- Location: Asheville NC
- Contact:
Re: Version 17 Won't Accept Security Certificate
Try manually adding the www to the beginning of the url.
http://support.mozilla.org/en-US/kb/sec ... -site-name
If you arrived at this page from a link from withing your banking website, you should probably email them and inform them of the coding error in their link.
http://support.mozilla.org/en-US/kb/sec ... -site-name
If you arrived at this page from a link from withing your banking website, you should probably email them and inform them of the coding error in their link.
Tip of the day: If it has "toolbar" in the name, it's crap.
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/
-
- Posts: 9
- Joined: March 28th, 2010, 10:36 am
Re: Version 17 Won't Accept Security Certificate
pd...interesting link, but didn't work. I've informed bank, but they say since it works on 16, it's a 17 error. Is there an easy way to roll 17 back to 16? thnx
-
- Posts: 13808
- Joined: November 7th, 2005, 11:26 am
Re: Version 17 Won't Accept Security Certificate
Don't ever add a certificate manually from a bank, if you value your money. That certificate is validated (or not) for a very good reason. It's a security feature. If you override it, you can't tell if you have a secure connection.
So look at the details yourself. There's quite a bit of information to be had, just by looking. Why is the certificate invalid? The browser may well tell you why it rejected the certificate.
If I have to guess, however, I would bet on the system clock on your computer. If it's set for the wrong date, it could think the certificate is expired.
So look at the details yourself. There's quite a bit of information to be had, just by looking. Why is the certificate invalid? The browser may well tell you why it rejected the certificate.
Last edited by VanillaMozilla on November 28th, 2012, 12:32 pm, edited 1 time in total.
-
- Posts: 9
- Joined: March 28th, 2010, 10:36 am
Re: Version 17 Won't Accept Security Certificate
Van...good advice, thnx. The message above is all I get. pd's link lays the blame on my bank, but 16 does work. FWIW, other folks seem to be having banking problems with 17. And my clock is fine!
-
- Posts: 13808
- Joined: November 7th, 2005, 11:26 am
Re: Version 17 Won't Accept Security Certificate
I see you did actually give me the error code. OK, look here: https://support.mozilla.org/en-US/kb/co ... n&r=0&as=s
The site may not be who you think it is, although I don't think it's that bad a problem.
Did you try using the address https://www.xxxbanking.com? Just a close look at the error message suggests that maybe you gave an incomplete address.
If you want to post the Web address of the bank, someone could check it out. You can also troubleshoot these matters to some extent (including viewing the certificate) by clicking on the icon to the left of the Web address. But I don't think you can get that far without accepting the certificate. (You can remove the possibly bad certificate again if necessary.)
It looks like the certificate is only valid for the subdomain (http://www.xxxbanking.com), not the whole works (xxxbanking.com). Patrick, do you know more about this? Sorry, I sort of barged in here.
The site may not be who you think it is, although I don't think it's that bad a problem.
Did you try using the address https://www.xxxbanking.com? Just a close look at the error message suggests that maybe you gave an incomplete address.
If you want to post the Web address of the bank, someone could check it out. You can also troubleshoot these matters to some extent (including viewing the certificate) by clicking on the icon to the left of the Web address. But I don't think you can get that far without accepting the certificate. (You can remove the possibly bad certificate again if necessary.)
It looks like the certificate is only valid for the subdomain (http://www.xxxbanking.com), not the whole works (xxxbanking.com). Patrick, do you know more about this? Sorry, I sort of barged in here.
-
- Posts: 9
- Joined: March 28th, 2010, 10:36 am
Re: Version 17 Won't Accept Security Certificate
Van...
I am not offered the option "I understand the Risks", which I expected. Weird, eh?
Yes, I tried inputting the address directly, no luck. I don't want (yet) to post the site address.
I agree with your last point.
thnx for your input, it's appreciated.
I am not offered the option "I understand the Risks", which I expected. Weird, eh?
Yes, I tried inputting the address directly, no luck. I don't want (yet) to post the site address.
I agree with your last point.
thnx for your input, it's appreciated.
-
- Posts: 13808
- Joined: November 7th, 2005, 11:26 am
Re: Version 17 Won't Accept Security Certificate
chriswchris wrote:I am not offered the option "I understand the Risks", which I expected. Weird, eh?
Yes. If you accept an invalid certificate, you should always see that, as far as I know. You can always try starting Fx in safe mode (Help > Start with addons disabled) to see if an extension has messed with stuff it shouldn't.
chriswchris wrote:Yes, I tried inputting the address directly, no luck. I don't want (yet) to post the site address.
You could post the address. I don't think there's any security breach in filling in the xxxx's. What do you mean 'no luck'? What happens when you put the address in?
Sorry, I don't see these warnings very often. I may not be much help. I vaguely remember something about a subdomain problem that sometimes causes confusion.
- patrickjdempsey
- Posts: 23686
- Joined: October 23rd, 2008, 11:43 am
- Location: Asheville NC
- Contact:
Re: Version 17 Won't Accept Security Certificate
Supposedly Firefox 17 introduced a "fix" for these kinds of loops:
https://bugzilla.mozilla.org/show_bug.cgi?id=634074
You might try this:
- Menu > Help > Troubleshooting Info > Show Folder.
- Close Firefox.
- Delete cert8.db.
- Restart Firefox.
This should hopefully clear up the confused cert and reload new ones.
https://bugzilla.mozilla.org/show_bug.cgi?id=634074
You might try this:
- Menu > Help > Troubleshooting Info > Show Folder.
- Close Firefox.
- Delete cert8.db.
- Restart Firefox.
This should hopefully clear up the confused cert and reload new ones.
Tip of the day: If it has "toolbar" in the name, it's crap.
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/
-
- Posts: 9
- Joined: March 28th, 2010, 10:36 am
Re: Version 17 Won't Accept Security Certificate
Van....I tried Safe Mode, a good idea, but it didn't work. "No luck" means I tried inputting the address directly, but got the same message (ie, it didn't work).
pd....I had tried that, didn't work. I think that "fix" involved an earlier version of FF.
I think a major clue lies in why I am not offered the option "I understand the Risks". I would think it would be on any standard warning message screen; the fact it's not there suggests something unusual must be going on.
pd....I had tried that, didn't work. I think that "fix" involved an earlier version of FF.
I think a major clue lies in why I am not offered the option "I understand the Risks". I would think it would be on any standard warning message screen; the fact it's not there suggests something unusual must be going on.
-
- Posts: 9
- Joined: March 28th, 2010, 10:36 am
Re: Version 17 Won't Accept Security Certificate
Van,pd..........GOT IT! I tried "Reset Firefox" under Troubleshooting and it worked! Tho I had to re-input all my extensions. Anyway, OK for now. Thnx.
- patrickjdempsey
- Posts: 23686
- Joined: October 23rd, 2008, 11:43 am
- Location: Asheville NC
- Contact:
Re: Version 17 Won't Accept Security Certificate
I'm not sure why resetting cert8 didn't work... but the bug appears to be caused by the certifications getting corrupted. It's not specific to any version, it's probably just a coincidence that it happened now.
Tip of the day: If it has "toolbar" in the name, it's crap.
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/