283442 - Starting Firefox brings up "unrecognised security certificate" dialog

Status: RESOLVED WORKSFORME

(Firefox :: General, defect)

Description

[Joules Taylor]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2

Pop-up reads: 
Website Certified by an Unkown Authority
Unable to verify the identity of *.mozilla.org as a trusted site
Possible reasons for the error:
- Your browser does not recognise the Certificate Authority that issued this
site's certificate
- The site's certificate is incomplete due to a server misconfiguration
- You are connected to a site pretending to be *.mozilla.org, possibly to obtain
your confidential information
Please notify the site's webmaster about the problem.

Before accepting this certificate you should examine this site's certificate
carefully. Are you willing to accept thie certificate for the purposes of
identifying the Web site *.mozilla.org?

[Examine Certificate]

(then three radio buttons, Accept permanently, Accept temporarily, Do not
accept, do not connect.)

I checked the certificate: it's issued by XRamp Security Services GS CA,
Expires 24/04/05.



Reproducible: Always

Steps to Reproduce:
1. Click on the Firefox shortcut icon.
2.
3.

Actual Results:  
Unrecognised security certificate pop-up appears, as described above.
Clicking on Accept temporarily closes popup and opens home page as expected.

Expected Results:  
Opened my homepage, http://www.wordwrights.co.uk , which is our default.


Problem first appeared about a week and a half ago.
I run anti-virus, anti-spyware and anti-adware scans at least once a week, and
to my knowledge my system is currently clean.
Firefox is the only browser we use regularly (I have IE, Netscape and Opera
installed on my computer, as I check my website pages in all of them to check
appearance before uploading to my sites, but haven't opened them in over a month).

Comment 1

[Daniel Veditz [:dveditz]]

Both bugzilla.mozilla.org and update.mozilla.org use wildcard certs issued by
XRamp. Since you don't have bugzilla as your home page I'm guessing this is
coming up when the client tries to make the check for available updates. The
root cert ought to be in your client unless you've explicitly removed it.

You're using an older version of Firefox according to the user agent, it's
possible the root cert was added since then. You ought to upgrade anyway, lots
of security flaws have been fixed since your version:
http://www.mozilla.org/projects/security/known-vulnerabilities.html

If upgrading doesn't solve the problem then I recommend the free user support
options described at http://www.mozilla.org/support/#community -- there's not
enough info here to know what needs to be fixed and they'll be able to help
figure it out.