This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

In Firefox on Android, how do I untrust the corrupt Blue Coat CA certificate issued by Symantec and the corrupt Chinese certificate CNNIC?

ChernobylGlow
ChernobylGlow
more options

I know how to do this on Windows ( http://bit.ly/2bcz1Qd ), I need the equivalent for how to do this in Firefox on Android.

I know how to do this on Windows ( http://bit.ly/2bcz1Qd ), I need the equivalent for how to do this in Firefox on Android.

All Replies (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

As I understand it, Firefox's Certificate Manager does not have a mechanism or interface to distrust website or intermediary certificates, only built-in root certificates. Unfortunately, then, there is no way to block trust of the BlueCoat certificates in Firefox on any platform.

The previously issued certificate might not be as big an issue as was originally thought:

https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/akOzSAMLf_k

But then Symantec bought Blue Coat, so... http://www.theregister.co.uk/2016/06/14/symantec_blue_coat_analysis/

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

Re CNNIC, is there a new issue or did this take care of it: https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/