Hello,

You have tried to reset Firefox ? To do ; go Here

Bye

Hi Matt, to view certificates installed on Firefox 55 and earlier:

Options > Advanced > Certificates

Click the "View Certificates" button

Make sure the "Authorities" tab is selected

Scroll down and look for a Mozilla Corporation section in the list.

Follow up,

I found the CERTIFICATE MANAGER under ABOUT:PREFERENCES, then the ADVANCED item, and it shows what you said I should expect to see - signingca1.addons.mozilla.org is listed under the AUTHORITIES tab.

But, Adblock Plus (as well as Microsoft.Net Framework assistant, I just noticed) - is still reporting as: " COULD NOT BE VERIFIED FOR USE IN FIREFOX AND HAS BEEN DISABLED"

I also noticed a green puzzle icon that is labledhotfix-update-xpi-intermediate (This is a hotfix that updates an intermediate certificate used for signing add-ons. It is one of the mechanizms used to fix bug 1548973) installed on May 4, 2019....which was two days ago...

The hotfix extension doesn't work in Firfox 52 ESR in my testing.

Did you do step 3?

(2) Clear the time Firefox last re-verified

This will set Firefox up to check much sooner than it otherwise would check.

(A) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful or accepting the risk.

(B) In the search box above the list, type or paste xpi- and pause while the list is filtered

(C) Right-click the app.update.lastUpdateTime.xpi-signature-verification preference and click Reset on the context menu

(3) Restart Firefox

You can exit Firefox normally, then start it up again. In my tests, it took less than 60 seconds for Firefox to verify my extensions.

So, I had a VALUE 1557118303 in: app.update.lastUpdateTime.xpi-signature-verification

I did the RESET on it, and the VALUE 1557118303 went away

I did an ENDTASK on FIREFOX from WINDOWS TASK MANAGER.

I restarted FIREFOX, and the value is again: 1557118303

But Addblock Plus is still DISABLED...

However, I just noticed something. I was starting a PROFILE that I had created a while ago. It is in that profile that Adblock is not functioning. I started the DEFAULT PROFILE, and Adblock was running there!

So, why is Adblock running in the DEFAULT profile, but not mt other profile?

mnalep said

So, why is Adblock running in the DEFAULT profile, but not mt other profile?

I have good news and bad news. The good news is, the new certificate worked in your default profile. The bad news is, you need to repeat the procedure in every profile.

Well, the thing is, I did the fix procedure in the OTHER profile - not in the DEFAULT profile. But the fix is only working in the DEFAULT profile!

mnalep said

Well, the thing is, I did the fix procedure in the OTHER profile - not in the DEFAULT profile. But the fix is only working in the DEFAULT profile!

Hmm, that seems physically impossible because each profile folder should have a distinct cert8.db file and separate extensions registry. ??

Well, the cert8.db in the DEFAULT was modified (per windows explorer on 5/6/19 at 2:00pm and is 656kb

The cert8.db in the OTHER profile was modified 5/6/19 at 2:19 pm, and is 352 kb.

Not sure what that implies...

When I look in the extensions folder, the DEFAULT profile (with Adblock working) has one file, the {d10d...} created 11/24/16

the OTHER profile (with no Adblock plus working) has two files. the {d103...} create 4/20/19 and a hotfix... file

Hi Matt, I don't have an explanation for how you could import a cert into one profile and it doesn't show up in the list there but instead it shows up in a different profile. You somehow need to get the cert into both profiles. That could involve copying the cert8.db that has it to the profile where it doesn't, but if they are crossed up, I couldn't honestly tell you how to tell which one has it.

It is possible that there is a problem with files in the profile folder that store the extensions registry.

Delete the extensions.* files (extensions.json, extensions.ini, extensions.sqlite) and compatibility.ini in the Firefox profile folder with Firefox closed to reset the extensions registry.

• https://support.mozilla.org/en-US/kb/Profiles

New files will be created when required.

See "Corrupt extension files":

• https://support.mozilla.org/en-US/kb/unable-install-add-ons-extensions-or-themes

You can check if there is a update available in case of issues.

• click the cogwheel button (left of the Search bar) on the about:addons page to "Check for updates"

If this didn't help then delete add-ons.json and possibly prefs.js in case there is a problem with preferences.

You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:preferences page.

• Help -> Troubleshooting Information -> Profile Directory:
  Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder
• http://kb.mozillazine.org/Profile_folder_-_Firefox

Jscher2000, I was reading your conversation with wendiwoman2 in my first thread on this problem. She also had two profiles, and said she fixed her addons issue as follows:

'wendiwoman2: 'I got it! I deleted (well, actually, I renamed) cert8.db and key3.db, then started FF. Now it let me install the certificate, and my add-ons are working again. Maybe one of the two files was corrupted? In any case, things are good again. I thank you profusely for devoting so much of your time and brain power to helping me out. Wendi

To which you replied: "Hi wendiwoman2, thanks for the update. I was going to suggest maybe "transplanting" the working cert8.db across to the other profile, but a fresh start probably is best."

Should I remove those two files from my OTHER profile? And the restart FF? (BTW I also noticed the DATE MODIFIED of the key3.db files are different; it is 1-26-17 in my DEFAULT profile's directory, but it is 5-6-19 in the OTHER profile's directory ... Maybe that means nothing, but since you two were discussing both files with her issue - I got the idea that perhaps both the cert8.db and key3.db should have been updated in the DEFAULT also, bit it wasn't - yet the DEFAULT profile is the one where the addd ons have started working again?

cor-el,

I was comparing the extensions.* files, and saw the DEFAULT profile has more of these files than the OTHER profile does.

My OTHER profile has only the .ini and .json files. The DEFAULT profile also has four more - a .log .rdf .sqlite and .sqlite-journal - why is my OTHER profile missing four extension.* files?

So, I can only delete the extensions.ini and extensions.json on my OTHER profile, and the compatibilty.ini? I guess I should try that next?

Let me ask this first though - if the idea is to rebuild extension data (which I think is the add-ons?) should I try just deleting the adblock plus and reinstalling it instead?

You may see more files in a profile if this profile has been used by older Firefox versions. These files aren't removed. current Firefox releases only use extensions.json, so if you have other files like extensions.ini and extensions.sqlite then these files are leftover form older Firefox versions. There has been a more recent change from key3.db to key4.db and cert8.db to cert9.db and from secmode.db to pkcs11.txt. There may also be folders that are no longer used. If the time stamp of a file shows that it hasn't been updated for months or years then this might be an indication of a leftover file.

Cor-el,

So, my next action is to close FF, and then delete the extensions.ini, extensions.json and the compatibilty.ini in my OTHER profile? Then restart FF?

jscher2000,

Is there a way to look at the contents of the cert8.db file? And what should it contain?

When I RESET the value earlier to null, and then saw it had been updated, what was that telling us?

When I clicked on the link you supplied, to update the certificate - is that update stored in the cert8.db file?

The cert8.db file contains intermediate certificates that Firefox caches when you visit website. It also stores certificates you install yourself. You would need the certutil.exe tool to inspect the file or use the Firefox Certificate Manager and look for lines under the Authorities tab that have "Software Security Device".

• https://developer.mozilla.org/Mozilla/Projects/NSS/tools/NSS_Tools_certutil

Cor-el,

OK, So after I deleted those 3 files, and restarted the FF profile affected, two tabs opened, along with the 'well this is embarassing tab'.

One tab asked me to allow "Another program on your computer would like to modify firefox with the following add-on: adblock plus 3.5.2 - and I clicked on CONTINUE.

The other tab asked to: "allow hotfix-update-xpi-intermediate 1.0.2 - which I DID NOT allow.

Then I clicked to restore the tabs in the 'well this is embarassing tab.

Then, after my tabs opened, I looked at the about:addons / extensions page - which I already had open from earlier. Now it showed me the Addblock PLus with the ENABLE button available - so I clicked on it - and now I have Addblock PLus working again. I see the ABP icon in the toolbar, and the ads are gone on the few pages I've looked at.

It seems like deleting the files you said to, somehow prompted FF to ask me to "install?", and ENABLE Addblock PLus.

I'm not sure install is the right word - what was FF asking for me to allow when it prompted me ""Another program on your computer would like to modify firefox with the following add-on: adblock plus 3.5.2"

The only thing still disabled in my about:addons / extensions is the Microsoft .NET Framework Assistant could not be verified for use in Firefox and has been disabled.

I'm not sure what I need that for?

It says under that message that it "Adds ClickOnce support and the abilty to report installed .NET versions"

How do I get that back, assuming I really need it?