As noted in the Release Notes of Firefox 52.0 [1], released March 7, 
'Display (but allow users to override) an “Untrusted Connection” error when 
encountering SHA-1 certificates that chain up to a root certificate included in 
Mozilla’s CA Certificate Program.'

So, it applies to all certs that have "AC Componentes Informáticos" in
the cert chain.

Untrusted Connection error with code:
"SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED" is expected on all
websites that have certs like https://www.edu.xunta.es/webmail/
(referenced before). Users may feel they have the same error like before
Firefox 51.0.

The only and unique version of Firefox where certs like this one works,
is 51.0, released January 24, which was updated to NSS 3.28.1.

[1] https://www.mozilla.org/en-US/firefox/52.0/releasenotes/

(Websites that have certs with "AC Administración Pública" in the cert
chain ARE NOT impacted, as "AC Administración Pública" is signed with
SHA-256. Example: https://sede.educacion.gob.es/ )

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/1271513

Title:
  www.cert.fnmt.es certificates are not included in Mozilla products

Status in Mozilla Firefox:
  Fix Released
Status in Mozilla Thunderbird:
  Fix Released
Status in firefox package in Ubuntu:
  Fix Released
Status in thunderbird package in Ubuntu:
  Fix Released

Bug description:
  Please add <www.cert.fnmt.es> (National Coin and Ding Factory of
  Spain) as a valid certification authority in the default Firefox
  installation.

  ProblemType: Bug
  DistroRelease: Ubuntu 13.10
  Package: firefox 26.0+build2-0ubuntu0.13.10.2
  ProcVersionSignature: Ubuntu 3.11.0-14.21-generic 3.11.7
  Uname: Linux 3.11.0-14-generic x86_64
  AddonCompatCheckDisabled: False
  ApportVersion: 2.12.5-0ubuntu2.2
  Architecture: amd64
  AudioDevicesInUse:
   USER        PID ACCESS COMMAND
   /dev/snd/controlC2:  es20490446e   2130 F.... pulseaudio
   /dev/snd/controlC1:  es20490446e   2130 F.... pulseaudio
   /dev/snd/controlC0:  es20490446e   2130 F.... pulseaudio
  BuildID: 20131206145143
  Channel: Unavailable
  Date: Wed Jan 22 12:49:53 2014
  Extensions: extensions.sqlite corrupt or missing
  ForcedLayersAccel: False
  IfupdownConfig:
   # interfaces(5) file used by ifup(8) and ifdown(8)
   auto lo
   iface lo inet loopback
  IncompatibleExtensions: Unavailable (corrupt or non-existant 
compatibility.ini or extensions.sqlite)
  InstallationDate: Installed on 2013-05-21 (245 days ago)
  InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Release amd64 (20130424)
  IpRoute:
   default via 192.168.2.1 dev eth0  proto static
   192.168.2.0/24 dev eth0  proto kernel  scope link  src 192.168.2.117  metric 
1
  IwConfig:
   eth0      no wireless extensions.

   lo        no wireless extensions.
  Locales: extensions.sqlite corrupt or missing
  MarkForUpload: True
  PrefSources: prefs.js
  Profiles: Profile0 (Default) - LastVersion=26.0/20131206145143 (In use)
  RelatedPackageVersions:
   google-talkplugin 4.9.1.0-1
   icedtea-7-plugin  1.4-3ubuntu2
   totem-mozilla     3.8.2-0ubuntu1
   rhythmbox-mozilla 2.99.1-0ubuntu1
  RfKill:

  RunningIncompatibleAddons: False
  SourcePackage: firefox
  Themes: extensions.sqlite corrupt or missing
  UpgradeStatus: Upgraded to saucy on 2013-10-18 (96 days ago)
  WifiSyslog:

  dmi.bios.date: 02/18/2008
  dmi.bios.vendor: Phoenix Technologies, LTD
  dmi.bios.version: 6.00 PG
  dmi.board.name: MS-7358
  dmi.board.vendor: MICRO-STAR INTERNATIONAL CO., LTD
  dmi.board.version: Fab D
  dmi.chassis.type: 3
  dmi.chassis.vendor: OEM
  dmi.chassis.version: OEM
  dmi.modalias: 
dmi:bvnPhoenixTechnologies,LTD:bvr6.00PG:bd02/18/2008:svnMEDIONPC:pnMS-7358:pvrOEM:rvnMICRO-STARINTERNATIONALCO.,LTD:rnMS-7358:rvrFabD:cvnOEM:ct3:cvrOEM:
  dmi.product.name: MS-7358
  dmi.product.version: OEM
  dmi.sys.vendor: MEDIONPC

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1271513/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to