1593338 - Firefox says can't find the certificate when establishing HTTPS connection

Status: RESOLVED DUPLICATE of bug 1593167

(Core :: Security: PSM, defect)

Description

[ivan.oleynikov95]

Attachment: *_bugzilla_mozilla_org.crt

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.70 Safari/537.36

Steps to reproduce:

Start firefox, type either "https://duckduckgo.com/" or "https://bugzilla.mozilla.org/" into the address bar, hit Enter.

Actual results:

Firefox gave me an error with code "MOZILLA_PKIX_ERROR_MITM_DETECTED", saying that secure connection cannot be established. This error page also has "View Certificate" link which allows to save the certificate which caused the problem -- I attached one of the certificates to this bug.

This behavior started one or two weeks ago (probably, after I all of the packages in my Archlinux). I can reproduce it from time to time, i.e. sometimes the mentioned websites work normally. But even when I get the error in Firefox, some other websites like https://google.com work perfectly well.

Expected results:

I expected Firefox to display the requested pages and show me either DuckDuckGo start page or Mozilla's Bugzilla.

I opened these pages in Chromium and they worked perfectly, and the certificates, which Chromium used to connect to them were the same as the ones which caused errors in Firefox. So I believe this isn't an issue with certificates of mentioned websites, but some problem with Firefox being unable to identify them.

Comment 1

[ivan.oleynikov95]

Attachment: duckduckgo-error-message.txt

I used Chromium to write this report, since Firefox wouldn't open Bugzilla as I told above.

Just in case this is needed, I include below detailed error messages given to me by Firefox.

```

```

Comment 2

[ivan.oleynikov95]

Sorry, Bugzilla sent the previous comment which I didn't finish without my consent. The file attached to it contains the error message, which Firefox gave me on DuckDuckGo.

Comment 3

[ivan.oleynikov95]

Attachment: bugzilla-error-message.txt

For the sake of completeness, attaching the same report for bugzilla.mozilla.org.

Comment 4

[ivan.oleynikov95]

I'm using firefox package version 70.0.1-1 from official Archlinux repo -- https://www.archlinux.org/packages/extra/x86_64/firefox/.