1061087 - Fortinet Digital Certificate (Error code: sec_error_ca_cert_invalid)

Status: RESOLVED DUPLICATE of bug 1034124

(Core :: Security: PSM, defect)

Description

[eusebio barrun jr.]

Attachment: ff31.png

Firefox 31 will force log out the user in Fortinet but not in Firefox 29. Both are using the same digital certificate.

Comment 1

[Dana Keeler (she/her) [:keeler]]

The documentation at https://wiki.mozilla.org/SecurityEngineering/x509Certs might be helpful for tracking down the issue. It would also be helpful if you could post a copy of the certificates the server is sending.

Comment 2

[eusebio barrun jr.]

Attachment: Fortinet_CA_SSLProxy.cer

Hi David, 

Thanks for the wiki resource I will give it to our sysad. I have attached here the certificate that we are using. Right now our only solution is to revert back to Firefox 29.

Comment 3

[Dana Keeler (she/her) [:keeler]]

Eusebio, this may have been fixed by bug 1034124. If you use a recent version of Firefox Nightly, are you able to add an override?

Comment 4

[eusebio barrun jr.]

Hi David, 

I'm gonna try Firefox Nightly, I'm still using Firefox 29. I will check the difference.

Comment 5

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

Dupe of bug 1042889?

Comment 6

[Dana Keeler (she/her) [:keeler]]

(In reply to Brian Smith (:briansmith, :bsmith, use NEEDINFO?) from comment #5)
> Dupe of bug 1042889?

Well, the certificate posted was x509v3, so I would assume not. If that was used as the server's certificate, then this would be a duplicate of bug 1034124. I haven't heard anything more from the reporter, and no one else seems to be experiencing this problem, so I'm just going to dup this to that bug.

Comment 7

[eusebio barrun jr.]

(In reply to David Keeler (:keeler) [use needinfo?] from comment #3)
> Eusebio, this may have been fixed by bug 1034124. If you use a recent
> version of Firefox Nightly, are you able to add an override?

Hi David, 

Thank you for your help, the newer version have fixed it up on our side.