Firefox3 - Revision history

Alu: /* Firefox 3 and Certificates */

2011-10-26T11:43:12Z

Firefox 3 and Certificates

← Older revision		Revision as of 13:43, 26 October 2011
Line 1:		Line 1:
	__NOTOC__		__NOTOC__
	= ~~Firefox 3~~ and ~~Certificates~~ =		= Webbrowsers and certificate errors =

	Read this if you are experiencing trouble accessing our software pages with ~~Firefox 3~~		Read this if you are experiencing trouble accessing our software pages with your webbrowser

	== Problem Description ==		== Problem Description ==

	~~Users of the recently released Mozilla Firefox version 3 can~~ experience problems when trying to access web-sites using secure connections and certificates such as our software pages (e.g. GenDB, EMMA). When accessing the secure page for the first time, Firefox ~~3 could~~ show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".		In some cases you may experience problems when trying to access web-sites using secure connections and certificates such as our software pages (e.g. GenDB, EMMA). When accessing the secure page for the first time, some webbrowsers such as the Mozilla Firefox up to version 5.0 may show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".

	The reason for this is that we are using a certificate that is not issued by a Certification Authority (CA) included into ~~Mozilla products~~. Certificates are used to identify and authenticate the server of a secure web-site. ~~Instead of purchasing such a~~ certificate from a commercial CA ~~included into Mozilla products,~~ we use a certificate signed by the ~~[[CeBiTec]]~~. ~~User who have just upgraded from~~ Firefox ~~2 and used our software before will most likely not be affected~~.		The reason for this is that we are using a certificate that is not issued by a Certification Authority (CA) included into a number of webbrowsers. Certificates are used to identify and authenticate the server of a secure web-site. A certificate can for example be purchased from a commercial CA. As an academic institution we use a certificate that is signed by the Deutsche Forschungs-Netz (DFN). Unfortunately, this CA (or better the German Telekom which is the root CA for the DFN) is, up to now, not included into some webbrowsers, for example older versions of Mozilla Firefox.

	Due to reasons of cost efficiency we do not intend to purchase a certificate from a commercial vendor for our servers. However, Firefox 3 is much more restrictive when it comes to unrecognized CAs and thus more complicated to configre for this than Firefox 2. We intend to obtain a certificate from the CA of the Deutsche Forschungs-Netz (DFN). Unfortunately, this CA (or better German Telekom which is the root CA for DFN) is, up to now, not included into Mozilla.		See the Mozilla bug report at https://bugzilla.mozilla.org/show_bug.cgi?id=378882 to get an impressive overview of the bureaucratic process of getting a root certificate into this product.
	See the Mozilla bug report
	https://bugzilla.mozilla.org/show_bug.cgi?id=378882 to get an impressive overview of the bureaucratic process of getting a root certificate into this product.

	== Solution ==		== Solution ==

Admin: 9 revisions

2011-10-26T06:14:56Z

9 revisions

← Older revision	Revision as of 08:14, 26 October 2011
(No difference)

imported>MichaelDondrup at 13:03, 23 June 2008

2008-06-23T13:03:35Z

← Older revision		Revision as of 15:03, 23 June 2008
Line 6:		Line 6:
	== Problem Description ==		== Problem Description ==

	Users of the recently released Mozilla Firefox version 3 can experience problems when trying to access ~~encrypted~~ web-sites such as our software pages. When accessing the ~~encrypted~~ page for the first time, Firefox 3 could show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".		Users of the recently released Mozilla Firefox version 3 can experience problems when trying to access web-sites using secure connections and certificates such as our software pages (e.g. GenDB, EMMA). When accessing the secure page for the first time, Firefox 3 could show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".

	The reason for this is that we are using a certificate that is not issued by a Certification Authority (CA) included into Mozilla products. Certificates are used to identify and authenticate the server of a secure web-site. Instead of purchasing such a certificate from a commercial CA included into Mozilla products, we use a certificate signed by the [[CeBiTec]]. User who have just upgraded from Firefox 2 and used our software before will most likely not be affected.		The reason for this is that we are using a certificate that is not issued by a Certification Authority (CA) included into Mozilla products. Certificates are used to identify and authenticate the server of a secure web-site. Instead of purchasing such a certificate from a commercial CA included into Mozilla products, we use a certificate signed by the [[CeBiTec]]. User who have just upgraded from Firefox 2 and used our software before will most likely not be affected.

imported>MichaelDondrup at 12:53, 23 June 2008

2008-06-23T12:53:48Z

← Older revision		Revision as of 14:53, 23 June 2008
Line 6:		Line 6:
	== Problem Description ==		== Problem Description ==

	~~The~~ recently released version 3 ~~of Mozilla Firefox~~ can ~~cause trouble~~ when trying to access encrypted web-sites such as our software pages. When accessing the encrypted page for the first time, Firefox 3 could show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".		Users of the recently released Mozilla Firefox version 3 can experience problems when trying to access encrypted web-sites such as our software pages. When accessing the encrypted page for the first time, Firefox 3 could show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".

	The reason for this is that we are using a certificate that is not issued by ~~an officially recognized~~ Certification Authority (CA). Certificates are used to identify the ~~provider~~ of a secure web-site. Instead of purchasing such a certificate from a commercial CA ~~accepted by~~ Mozilla, we use a so certificate signed by the [[CeBiTec]].		The reason for this is that we are using a certificate that is not issued by a Certification Authority (CA) included into Mozilla products. Certificates are used to identify and authenticate the server of a secure web-site. Instead of purchasing such a certificate from a commercial CA included into Mozilla products, we use a certificate signed by the [[CeBiTec]]. User who have just upgraded from Firefox 2 and used our software before will most likely not be affected.

	Due to reasons of cost efficiency we do not intend to purchase a commercial ~~certificate~~ for our servers. However, Firefox 3 is ~~now~~ much more restrictive when it comes to unrecognized CAs. We intend to obtain a certificate from the CA of the Deutsche Forschungs-Netz (DFN). Unfortunately, this CA (or better German Telekom which is the root CA for DFN) is ~~still~~ not ~~recognized by~~ Mozilla.		Due to reasons of cost efficiency we do not intend to purchase a certificate from a commercial vendor for our servers. However, Firefox 3 is much more restrictive when it comes to unrecognized CAs and thus more complicated to configre for this than Firefox 2. We intend to obtain a certificate from the CA of the Deutsche Forschungs-Netz (DFN). Unfortunately, this CA (or better German Telekom which is the root CA for DFN) is, up to now, not included into Mozilla.
	See the Mozilla bug report		See the Mozilla bug report
	https://bugzilla.mozilla.org/show_bug.cgi?id=378882 to get an impressive overview of the ~~certification~~ process.		https://bugzilla.mozilla.org/show_bug.cgi?id=378882 to get an impressive overview of the bureaucratic process of getting a root certificate into this product.

	== Solution ==		== Solution ==

	To access our software you may want to follow the procedure outlined below. This has to be done only once. We apologize for any ~~confusion~~ caused by this.		To access our software you may want to follow the procedure outlined below. This has to be done only once. We apologize for any complication caused by this.

	* In the alert box, click '''OK'''		* In the alert box, click '''OK'''

imported>MichaelDondrup at 15:04, 20 June 2008

2008-06-20T15:04:22Z

← Older revision		Revision as of 17:04, 20 June 2008
Line 11:		Line 11:

	Due to reasons of cost efficiency we do not intend to purchase a commercial certificate for our servers. However, Firefox 3 is now much more restrictive when it comes to unrecognized CAs. We intend to obtain a certificate from the CA of the Deutsche Forschungs-Netz (DFN). Unfortunately, this CA (or better German Telekom which is the root CA for DFN) is still not recognized by Mozilla.		Due to reasons of cost efficiency we do not intend to purchase a commercial certificate for our servers. However, Firefox 3 is now much more restrictive when it comes to unrecognized CAs. We intend to obtain a certificate from the CA of the Deutsche Forschungs-Netz (DFN). Unfortunately, this CA (or better German Telekom which is the root CA for DFN) is still not recognized by Mozilla.
	See		See the Mozilla bug report
	https://bugzilla.mozilla.org/show_bug.cgi?id=378882 ~~for a rather funny~~ overview of the ~~certfication~~ process.		https://bugzilla.mozilla.org/show_bug.cgi?id=378882 to get an impressive overview of the certification process.

			== Solution ==

	To access our software you may want to follow the procedure outlined below. This has to be done only once. We apologize for any confusion caused by this.		To access our software you may want to follow the procedure outlined below. This has to be done only once. We apologize for any confusion caused by this.

imported>MichaelDondrup at 14:51, 20 June 2008

2008-06-20T14:51:21Z

← Older revision		Revision as of 16:51, 20 June 2008
Line 8:		Line 8:
	The recently released version 3 of Mozilla Firefox can cause trouble when trying to access encrypted web-sites such as our software pages. When accessing the encrypted page for the first time, Firefox 3 could show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".		The recently released version 3 of Mozilla Firefox can cause trouble when trying to access encrypted web-sites such as our software pages. When accessing the encrypted page for the first time, Firefox 3 could show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".

	The reason for this is that we are using a certificate that is not issued by an officially recognized Certification Authority (CA). Certificates are used to identify the provider of a secure web-site. Instead of purchasing such a certificate from a commercial CA accepted by Mozilla, we use a so ~~called 'self-~~signed~~' certificate~~. We do not intend to purchase ~~such~~ a commercial certificate~~, however~~, Firefox 3 is now much more restrictive when it comes to unrecognized CAs ~~(we could get~~ a certificate from the Deutsche Forschungs-Netz (DFN), ~~but~~ this is ~~also~~ not recognized by Mozilla ~~by default)~~.		The reason for this is that we are using a certificate that is not issued by an officially recognized Certification Authority (CA). Certificates are used to identify the provider of a secure web-site. Instead of purchasing such a certificate from a commercial CA accepted by Mozilla, we use a so certificate signed by the [[CeBiTec]].

			Due to reasons of cost efficiency we do not intend to purchase a commercial certificate for our servers. However, Firefox 3 is now much more restrictive when it comes to unrecognized CAs. We intend to obtain a certificate from the CA of the Deutsche Forschungs-Netz (DFN). Unfortunately, this CA (or better German Telekom which is the root CA for DFN) is still not recognized by Mozilla.
			See
			https://bugzilla.mozilla.org/show_bug.cgi?id=378882 for a rather funny overview of the certfication process.

	To access our software you may want to follow the procedure outlined below. This has to be done only once. We apologize for any confusion caused by this.		To access our software you may want to follow the procedure outlined below. This has to be done only once. We apologize for any confusion caused by this.

imported>MichaelDondrup at 13:59, 19 June 2008

2008-06-19T13:59:19Z

← Older revision		Revision as of 15:59, 19 June 2008
Line 4:		Line 4:
	Read this if you are experiencing trouble accessing our software pages with Firefox 3		Read this if you are experiencing trouble accessing our software pages with Firefox 3

			== Problem Description ==

			The recently released version 3 of Mozilla Firefox can cause trouble when trying to access encrypted web-sites such as our software pages. When accessing the encrypted page for the first time, Firefox 3 could show an alert message "www.cebitec.uni-bielefeld.de:443 uses an invalid security certificate".

			The reason for this is that we are using a certificate that is not issued by an officially recognized Certification Authority (CA). Certificates are used to identify the provider of a secure web-site. Instead of purchasing such a certificate from a commercial CA accepted by Mozilla, we use a so called 'self-signed' certificate. We do not intend to purchase such a commercial certificate, however, Firefox 3 is now much more restrictive when it comes to unrecognized CAs (we could get a certificate from the Deutsche Forschungs-Netz (DFN), but this is also not recognized by Mozilla by default).

			To access our software you may want to follow the procedure outlined below. This has to be done only once. We apologize for any confusion caused by this.

			* In the alert box, click '''OK'''
	[[Image:Firefox3$bild_1.png]]		[[Image:Firefox3$bild_1.png]]
			* Click '''Or you can add an exception...'''

	[[Image:Firefox3$bild_2.png]]		[[Image:Firefox3$bild_2.png]]
			* Click '''Add Exception'''
	[[Image:Firefox3$bild_3.png]]		[[Image:Firefox3$bild_3.png]]
			* In the following dialogue click '''Get Certificate'''
	[[Image:Firefox3$bild_4.png]]		[[Image:Firefox3$bild_4.png]]
			* After the certificate has loaded, check the '''Permanently store exception checkbox'''. Otherwise, the procedure has to be repeated after each browser start.
			* Click '''Confirm Security Exception'''
			* The software page should appear, this has only to be done once for all cebitec pages

	[[Image:Firefox3$bild_5.png]]		[[Image:Firefox3$bild_5.png]]

imported>MichaelDondrup at 13:32, 19 June 2008

2008-06-19T13:32:11Z

← Older revision		Revision as of 15:32, 19 June 2008
Line 4:		Line 4:
	Read this if you are experiencing trouble accessing our software pages with Firefox 3		Read this if you are experiencing trouble accessing our software pages with Firefox 3

	[[Image:Firefox3$~~cert1~~.png]]		[[Image:Firefox3$bild_1.png]]

			[[Image:Firefox3$bild_2.png]]

			[[Image:Firefox3$bild_3.png]]

			[[Image:Firefox3$bild_4.png]]

			[[Image:Firefox3$bild_5.png]]

imported>MichaelDondrup at 13:12, 19 June 2008

2008-06-19T13:12:50Z

← Older revision		Revision as of 15:12, 19 June 2008
Line 4:		Line 4:
	Read this if you are experiencing trouble accessing our software pages with Firefox 3		Read this if you are experiencing trouble accessing our software pages with Firefox 3

	[[~~Media~~:Firefox3$~~Bild~~]] ~~1.png~~		[[Image:Firefox3$cert1.png]]

imported>MichaelDondrup at 13:11, 19 June 2008

2008-06-19T13:11:11Z

← Older revision		Revision as of 15:11, 19 June 2008
Line 3:		Line 3:

	Read this if you are experiencing trouble accessing our software pages with Firefox 3		Read this if you are experiencing trouble accessing our software pages with Firefox 3

			[[Media:Firefox3$Bild]] 1.png