Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Αυτός ο ιστότοπος θα έχει περιορισμένη λειτουργικότητα, όσο εκτελούμε εργασίες συντήρησης για να βελτιώσουμε την εμπειρία σας. Αν ένα άρθρο δεν επιλύει το ζήτημά σας και θέλετε να κάνετε μια ερώτηση, η κοινότητα υποστήριξής μας είναι έτοιμη να σας βοηθήσει στο Twitter (@FirefoxSupport) και στο Reddit (/r/firefox).

Avatar for Username

Αναζήτηση στην υποστήριξη

Προσοχή στις απάτες! Δεν θα σας ζητήσουμε ποτέ να καλέσετε ή να στείλετε μήνυμα σε κάποιον αριθμό τηλεφώνου ή να μοιραστείτε προσωπικά δεδομένα. Αναφέρετε τυχόν ύποπτη δραστηριότητα μέσω της επιλογής «Αναφορά κατάχρησης».

Μάθετε περισσότερα

Αυτό το νήμα αρχειοθετήθηκε. Παρακαλούμε κάντε νέα ερώτηση αν χρειάζεστε βοήθεια.

Master password disables any trust setting on certificates

  • 4 απαντήσεις
  • 1 έχει αυτό το πρόβλημα
  • 5 προβολές
  • Τελευταία απάντηση από louis925

louis925
louis925
more options

Whenever Firefox master password is enable, selecting any CA certificate trust settings in the Firefox Certificate Manager will actually disable them upon next reboot of the computer.

I tried to select the trust setting "This certificate can identify websites." for the "Kaspersky Anti-Virus Personal Root Certificate". However, I noticed the following problem:

1) If I enable master password, the Trust settings for certificates have no effect. They remain disabled. I have tried restarting Firefox or changing the trust setting after I entered the master password in the pop up window but they didn't work. The trust settings can only be changed when master password is disable. You can re-enable master password later. The trust settings will remain working. But...

2) If the trust settings are enabled and work properly with master password off, doing the following steps will actually disable those settings instead of enable them: (i) re-enable the master password (ii) go back to the trust setting (iii) deselect and select the already enabled settings again (iv) click "OK" (v) restart your computer. Now those settings will become unchecked after reboot.

I believe these bugs has already been observed in Firefox 57 but remain unfixed.

Firefox: 59.0.2 OS: Windows 7 Kaspersky: 18.0.0.405 (g)

Whenever Firefox master password is enable, selecting any CA certificate trust settings in the Firefox Certificate Manager will actually disable them upon next reboot of the computer. I tried to select the trust setting "This certificate can identify websites." for the "Kaspersky Anti-Virus Personal Root Certificate". However, I noticed the following problem: 1) If I enable master password, the Trust settings for certificates have no effect. They remain disabled. I have tried restarting Firefox or changing the trust setting after I entered the master password in the pop up window but they didn't work. The trust settings can only be changed when master password is disable. You can re-enable master password later. The trust settings will remain working. But... 2) If the trust settings are enabled and work properly with master password off, doing the following steps will actually disable those settings instead of enable them: (i) re-enable the master password (ii) go back to the trust setting (iii) deselect and select the already enabled settings again (iv) click "OK" (v) restart your computer. Now those settings will become unchecked after reboot. I believe these bugs has already been observed in Firefox 57 but remain unfixed. Firefox: 59.0.2 OS: Windows 7 Kaspersky: 18.0.0.405 (g)
Συνημμένα στιγμιότυπα

Τροποποιήθηκε στις από το χρήστη louis925

Όλες οι απαντήσεις (4)

the-edmeister
the-edmeister
  • Moderator
more options

Have you posted this issue to the Kaspersky support forum? Sounds like a problem with Kaspersky and the Firefox Master Password feature that Kaspersky needs to deal with.

louis925
louis925 Ιδιοκτήτης ερώτησης
more options

Yes, I did ask Kaspersky support. Part 1 is the problem and workaround that the Kaspersky Technical Support told me. However, problem 2 is in addition to problem 1.

I am not sure if this is specific to Kaspersky. This can also happen to other certificate as long as user want to change the trust setting of the certificate with master password enabled.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

This can happen when you set Firefox to import the Windows root certificates.

  • security.enterprise_roots.enabled = true => false

See also:

louis925
louis925 Ιδιοκτήτης ερώτησης
more options

To cor-el

Thanks for the information but the "security.enterprise_roots.enabled" is already set at false on my Firefox, and the problem remains.

Also, the SEC_ERROR_UNKNOWN_ISSUER problem with Kaspersky have been fixed in earlier updates.