In <news:[email protected]>,
"David E. Ross" <[email protected]> wrote:

> On 12/16/2009 8:55 PM, »Q« wrote:
 
> > Trying to install Adblock Plus 1.1.2 gives me a "Signing could not
> > be verified" error.  It's the same whether I try to install AdBlock
> > Plus 1.1.2 by clicking "Add to SeaMonkey" from
> > <https://addons.mozilla.org/en-US/seamonkey/addon/1865> or if I try
> > to do it through the Add-ons Manager or if I download it from AMO
> > then try to install it by dragging my copy to the browser.
> > 
> > Here's a screenshot of the error, from trying to install it via the
> > Add-ons Manager: <http://remarqs.net/misc/sm-addon-error.png>
 
> On the SeaMonkey menu bar, select [Edit > Preferences].  On the
> Preferences window, select [Privacy & Security > Certificates] in the
> left (Category) area.  On the Certificates pane, select the Manage
> Certificates button.
> 
> On the Certificate Manager window, select the Authorities tab.  Scroll
> down about 2/3 of the way, to StartCom Ltd.  Under StartCom Ltd., you
> will see two certificates:  StartCom Certification Authority and Free
> SSL Certification Authority.

Thanks -- enabling "StartCom Certification Authority" to identify
software makers resolved it for me.

> Note:  There should already be a check for StartCom Certification
> Authority for "This certificate can identify software makers."  That
> is the way Mozilla has configured the certificate database.  However,
> if you check that for Free SSL Certification Authority, safety
> considerations indicate you should clear the check after AdBlock Plus
> is installed.

Gentoo does use the Mozilla database, and there wasn't a check
for StartCom Certification Authority.  But Gentoo installs NSS as a
separate package (Gentoo is special, Wladimir ;) so these weren't the
cert settings that ship with SeaMonkey, I guess.  There was no checkbox
by it in Firefox either.

I've got nss-3.12.3-r1, which isn't the latest from Mozilla but which
is well after StartCom certs were added.  (The -r1 is a Gentoo build
revision.)  If it's not fixed when Gentoo stabilizes their 3.12.4,
I'll try to remember to file a bug with them.

-- 
»Q«                                                              /"\
                                      ASCII Ribbon Campaign      \ /
                                       against html e-mail        X
                                     <http://asciiribbon.org/>   / \
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to