641547 - Security error appearing in Firefox on Geotrust Wildcard protected Website.

Status: RESOLVED INCOMPLETE

(Firefox :: Security, defect)

Description

[gtaxml]

User-Agent:       Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Build Identifier: Latest version of Firefox

Dear All,

We have a website that is protected by a Geotrust Wildcard.  On the most recent version of Firefox, a 

“ www.xxxxx.com uses an invalid security certificate. 

The certificate is not trusted because the issuer certificate is unknown.” 

Page is displayed.  This site works normally on all other browsers, except for the most recent version of Firefox (it does work on older versions).  We have looked into this, and it would seem that Firefox may not be holding the relevant trusted certificates in it's certificate authority store. 


Reproducible: Always

Steps to Reproduce:
1.  Go to website.
2.  Invalid Security certificate page appears rather than website homepage.
3.
Actual Results:  
Invalid Security certificate page appears rather than website homepage.

Expected Results:  
Gone to the website home page.

I believe that Verisign may have already raised this issue?  However, we would really appreciate any update.

Comment 1

[Mats Palmgren (inactive)]

Please specify what you mean by "Latest version of Firefox".  Thanks.

Comment 2

[gtaxml]

Thanks for your response, Mats,

This issue is occuring with version 3.6.15.

Comment 3

[Matthias Versen [:Matti]]

We need an URL. A report without URL is useless.
A missing root can only be added by a request of the CA (and your report would be invalid) but it's unlikely that this is a problem because "it does work on older versions".

It's most likely a server configuration error like this one :
https://wiki.mozilla.org/Incomplete_Certificate_Chain

Does this website report that your certificate chain is ok :
http://www.sslshopper.com/ssl-checker.html ?

Comment 4

[u279076]

Resolving INCOMPLETE in 2 weeks if no more info is provided.

Comment 5

[Tyler Downer [He/Him]]

No reply, INCOMPLETE. Please retest with Firefox 4 or later and a new profile (http://support.mozilla.com/kb/Managing+profiles). If you continue to see this issue with the newest firefox and a new profile, then please comment on this bug.