当サイトはユーザー体験を改善するためのメンテナンスを実施中に機能が制限される予定です。記事を読んでもあなたの問題が解決せず質問をしたい場合は、Twitter の @FirefoxSupport、Reddit の /r/firefox で、サポートコミュニティが皆さんを助けようと待機しています。

Avatar for Username

Mozilla サポートの検索

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

詳しく学ぶ

このスレッドはアーカイブに保管されました。 必要であれば新たに質問してください。

Why still Diginotar certificate exist on v.7 of FF?

  • 2 件の返信
  • 1 人がこの問題に困っています
  • 9 回表示
  • 最後の返信者: cor-el

majix
majix
more options

After Diginotar hacked by a person Mozilla said that we should delete Diginotar root CA certificate in v.6 but in v.7 it still exist. why?

After Diginotar hacked by a person Mozilla said that we should delete Diginotar root CA certificate in v.6 but in v.7 it still exist. why?

すべての返信 (2)

Vivek
Vivek
more options

It exists as an untrusted certificate authority. So when Firefox encounters a certificate issued by DigiNotar it already knows that the CA is malicious and therefore not to trust the certificate.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can click the Edit button on the DigiNotar certificates to verify that all trust bits are unchecked.
That will make it impossible for them to be used as root certificates.

Select a DigiNotar certificate in the Certificate Manager.

  • Click the Edit button to verify that all trust bits are unchecked
  • Click the View button and go to Details to verify that the certificate has been deactivated (Explicitly Distrust DigiNotar Root CA)