[opensuse] firefox error - sec_error_reused_issuer_and_serial
When I try to connect to a specific HP ILO card/server, I get the following from firefox:
Secure Connection Failed
An error occurred during a connection to adenauer.ilo.
You have received an invalid certificate. Please contact the server administrator or email correspondent and give them the following information:
Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number.
(Error code: sec_error_reused_issuer_and_serial)
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
However, with Opera I have no such issues. How can can fix it in Firefox? -- Per Jessen, Zürich (5.7°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Am Samstag, 4. Januar 2014, 12:30:26 schrieb Per Jessen:
[...]. However, with Opera I have no such issues. How can can fix it in Firefox?
There is nothing to fix in Firefox, the HP ILO card/server is broken and must be fixed: https://bugzilla.mozilla.org/show_bug.cgi?id=435013 However, you could remove these certificates from Firefox and do not add again a permanent exception for them. Then, Firefox should not be able to detect the duplicate anymore since it should forget the certificates after a restart. Gruß Jan -- Even the boldest zebra fears the hungry lion. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Jan Ritzerfeld wrote:
Am Samstag, 4. Januar 2014, 12:30:26 schrieb Per Jessen:
[...]. However, with Opera I have no such issues. How can can fix it in Firefox?
There is nothing to fix in Firefox, the HP ILO card/server is broken and must be fixed: https://bugzilla.mozilla.org/show_bug.cgi?id=435013
Okay - I can install another certificate (probably a good idea any way), but why doesn't this happen with other HP ILO cards? Just a coincidence?
However, you could remove these certificates from Firefox and do not add again a permanent exception for them. Then, Firefox should not be able to detect the duplicate anymore since it should forget the certificates after a restart.
I guess this means removing the other exceptions I have added (the one card that has this problem was not added as an exception). -- Per Jessen, Zürich (5.7°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Am Samstag, 4. Januar 2014, 14:34:30 schrieb Per Jessen:
[...]. Okay - I can install another certificate (probably a good idea any way), but why doesn't this happen with other HP ILO cards? Just a coincidence?
You need at least two certificates containing the same serial number that are issued by the same authority. Furthermore, you will not notice any problem when visiting the first problematic card.
[...] I guess this means removing the other exceptions I have added (the one card that has this problem was not added as an exception).
Indeed. And IIRC, you just cannot add the problematic card because there is no option in the error page for this kind of error. Gruß Jan -- All's fair in Love and War (Is there a difference?) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
В Сб, 04/01/2014 в 12:30 +0100, Per Jessen пишет:
When I try to connect to a specific HP ILO card/server, I get the following from firefox:
Secure Connection Failed
An error occurred during a connection to adenauer.ilo.
You have received an invalid certificate. Please contact the server administrator or email correspondent and give them the following information:
Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number.
(Error code: sec_error_reused_issuer_and_serial)
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
However, with Opera I have no such issues. How can can fix it in Firefox?
Welcome to the club ... https://bugzilla.mozilla.org/show_bug.cgi?id=435013 Does iLO support generating new or loading custom certificate? I guess it will be easiest solution (besides not use FF to access it). -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Andrey Borzenkov wrote:
В Сб, 04/01/2014 в 12:30 +0100, Per Jessen пишет:
When I try to connect to a specific HP ILO card/server, I get the following from firefox:
Secure Connection Failed
An error occurred during a connection to adenauer.ilo.
You have received an invalid certificate. Please contact the server administrator or email correspondent and give them the following information:
Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number.
(Error code: sec_error_reused_issuer_and_serial)
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
However, with Opera I have no such issues. How can can fix it in Firefox?
Welcome to the club ...
Oh, wow ...
Does iLO support generating new or loading custom certificate? I guess it will be easiest solution (besides not use FF to access it).
Yes, I think I should be able to load a new certificate. Thanks for suggesting it. -- Per Jessen, Zürich (5.6°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Per Jessen wrote:
Andrey Borzenkov wrote:
Does iLO support generating new or loading custom certificate? I guess it will be easiest solution (besides not use FF to access it).
Yes, I think I should be able to load a new certificate. Thanks for suggesting it.
New certificates loaded on all ILO cards, problem solved. Again thanks for suggesting it. -- Per Jessen, Zürich (4.9°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (3)
-
Andrey Borzenkov -
Jan Ritzerfeld -
Per Jessen