[SOLVED] Connection is untrusted puzzle

[Jim Byrnes]

On 01/06/2013 01:12 PM, Jim Byrnes wrote:
> On 01/06/2013 11:32 AM, JD wrote:
>>
>> On 01/06/2013 10:27 AM, JD wrote:
>>>
>>> On 01/06/2013 09:31 AM, Jim Byrnes wrote:
>>>> I just tried to access a financial site on 12.04 using Firefox 17.0.1
>>>> - Canonical - 1.0 and was told the connection was untrusted because:
>>>>
>>>> not-its-real-name.com uses an invalid security certificate.
>>>>
>>>> The certificate is not trusted because no issuer chain was provided.
>>>>
>>>> (Error code: sec_error_unknown_issuer)
>>>>
>>>>
>>>> On the same desktop machine running 10.04 using Firefox 17.0.1 -
>>>> manually installed I get no warning and can connect as usual.
>>>>
>>>> On my laptop running 12.04 - Firefox 17.0.1 - Canonical - 1.0 I get
>>>> no warning and can connect as usual.
>>>>
>>>> I have compared the Security and Encryption settings between the 3
>>>> machines and see no differences.  The certificate is from GeoTrust if
>>>> that makes a difference.
>>>>
>>>> Anyone have any ideas where to look to fix this?
>>>>
>>>> Thanks,  Jim
>>>>
>>>>
>>> Do you have a certificate monitoring add-on or plugin?
>>> Check your browser's add-on's, Plugins and Extensions.
>> Also, on your browswer:
>> Edit -> Preferences -> Advanced
>>      Under Certificates, be sure that 'Select one automatically' is
>> checked.
>
> I don't think that applies here.  If I am reading it correctly it is
> about personal certificates and I don't have any.  In any case all three
> machines are set at "Ask me every time".  I did change it on the problem
> system and it made no difference.
>
>> Then, click on View Certificates.
>> You should see GeoTrust among allowed certificate issuer.
>>
>> Retry to browse to that site.
>>
>
> There are several GeoTrust listings there. I Compared the working and
> non-working 12.04's. On the working one I see under the Security Device
> column it shows Builtin Object Token and Software Security Device. On
> the non-working one I only see Builtin Object Token.
>
> Googling the error message I found suggestions to clear the cache and
> delete and let it rebuild the cert8.db file.  I tried both and still
> can't connect.
>
>
>
> Regards,  Jim
>


Must have been a problem with cert8.db because when I replaced it with 
the one from my laptop I can connect with no errors.

Regards,  Jim