439955 - Verisign Class 3 Secure Server CA not included with Firefox 3

Status: RESOLVED INVALID

(Core :: Security: PSM, defect)

Description

[James Smith]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0

Going to the URL, Firefox refused to load the website due to the certificate being invalid.  After examining the details, it seems to be because this particular certificate uses the Verisign Class 3 Secure Server CA, which isn't included in Firefox 3.  

Reproducible: Always

Steps to Reproduce:
1. Go to http://support.ca.com/
2. The browser redirects to https://support.ca.com/irj/portal/anonymous so you can log in.
3. An error message is displayed about the site
Actual Results:  
The site does not display and Firefox complains about the site attempting to identify itself with invalid information.

Expected Results:  
The site should display without an alert.

Comment 1

[Kai Engert (:KaiE:)]

The cert you are describing is not a root cert. It is an intermediate cert. We do not ship intermediate certs.

You must configure your SSL server to send all intermediate certificates in addition to your sever cert. Verisign support should be able to provide you with instructions (I'm sure this is an FAQ).

This bug is invalid.