Connection is untrusted puzzle

[Jim Byrnes]

On 01/06/2013 11:32 AM, JD wrote:
>
> On 01/06/2013 10:27 AM, JD wrote:
>>
>> On 01/06/2013 09:31 AM, Jim Byrnes wrote:
>>> I just tried to access a financial site on 12.04 using Firefox 17.0.1
>>> - Canonical - 1.0 and was told the connection was untrusted because:
>>>
>>> not-its-real-name.com uses an invalid security certificate.
>>>
>>> The certificate is not trusted because no issuer chain was provided.
>>>
>>> (Error code: sec_error_unknown_issuer)
>>>
>>>
>>> On the same desktop machine running 10.04 using Firefox 17.0.1 -
>>> manually installed I get no warning and can connect as usual.
>>>
>>> On my laptop running 12.04 - Firefox 17.0.1 - Canonical - 1.0 I get
>>> no warning and can connect as usual.
>>>
>>> I have compared the Security and Encryption settings between the 3
>>> machines and see no differences.  The certificate is from GeoTrust if
>>> that makes a difference.
>>>
>>> Anyone have any ideas where to look to fix this?
>>>
>>> Thanks,  Jim
>>>
>>>
>> Do you have a certificate monitoring add-on or plugin?
>> Check your browser's add-on's, Plugins and Extensions.
> Also, on your browswer:
> Edit -> Preferences -> Advanced
>      Under Certificates, be sure that 'Select one automatically' is
> checked.

I don't think that applies here.  If I am reading it correctly it is 
about personal certificates and I don't have any.  In any case all three 
machines are set at "Ask me every time".  I did change it on the problem 
system and it made no difference.

> Then, click on View Certificates.
> You should see GeoTrust among allowed certificate issuer.
>
> Retry to browse to that site.
>

There are several GeoTrust listings there. I Compared the working and 
non-working 12.04's. On the working one I see under the Security Device 
column it shows Builtin Object Token and Software Security Device. On 
the non-working one I only see Builtin Object Token.

Googling the error message I found suggestions to clear the cache and 
delete and let it rebuild the cert8.db file.  I tried both and still 
can't connect.



Regards,  Jim