Bug#756101: iceweasel: Cannot add exception for "sec_error_unknown_issuer"

Frank Lanitz frank at frank.uvena.de
Sat Jul 26 08:39:57 UTC 2014


Package: iceweasel
Version: 31.0-1
Severity: normal

Dear Maintainer,

With latest updates I'm not able anymore to add an exception for HTTPS if
iceweasel is not knowing the issuer of an certificate.This is very disturbing
as e.g. Debian has also removed CAcert from list of certs so even I have the
fingerprint of the cert of a server, I cannot add them as "ok" without doing
some workaround via about:config.

I'm only getting
<domain> uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown.
(Error code: sec_error_unknown_issuer)

without any further option than  'Get me out of here!'



-- Package-specific info:

-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-rc6-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii  debianutils               4.4
ii  fontconfig                2.11.0-5
ii  libasound2                1.0.28-1
ii  libatk1.0-0               2.12.0-1
ii  libc6                     2.19-7
ii  libcairo2                 1.12.16-2
ii  libdbus-1-3               1.8.6-1
ii  libdbus-glib-1-2          0.102-1
ii  libevent-2.0-5            2.0.21-stable-1
ii  libffi6                   3.1-2
ii  libfontconfig1            2.11.0-5
ii  libfreetype6              2.5.2-1
ii  libgcc1                   1:4.9.1-1
ii  libgdk-pixbuf2.0-0        2.30.7-1
ii  libglib2.0-0              2.40.0-3
ii  libgtk2.0-0               2.24.24-1
ii  libhunspell-1.3-0         1.3.3-2
ii  libnspr4                  2:4.10.6-1
ii  libnss3                   2:3.16.3-1
ii  libpango-1.0-0            1.36.3-1
ii  libsqlite3-0              3.8.5-2
ii  libstartup-notification0  0.12-3
ii  libstdc++6                4.9.1-1
ii  libvpx1                   1.3.0-2
ii  libx11-6                  2:1.6.2-2
ii  libxext6                  2:1.3.2-1
ii  libxrender1               1:0.9.8-1
ii  libxt6                    1:1.1.4-1
ii  procps                    1:3.3.9-7
ii  zlib1g                    1:1.2.8.dfsg-1

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
pn  fonts-mathjax          <none>
ii  fonts-oflb-asana-math  000.907-6
ii  fonts-stix [otf-stix]  1.1.1-1
ii  libcanberra0           0.30-2
pn  libgnomeui-0           <none>
ii  libgssapi-krb5-2       1.12.1+dfsg-4
pn  mozplugger             <none>

-- no debconf information



More information about the pkg-mozilla-maintainers mailing list