mkaply
Integrated CA sometimes doesn't work
Hi, I'm integrating a CA-certificate via CCK2 and generally it does work as intended. The certificate is integrated in every case, but since Firefox-Update 58.0.1 there are some Clients which get the error message "SEC_ERROR_UNKNOWN_ISSUER". I can find my own CA in the Certificate Manager. But the only way I got it to work, is to remove my CA, restart Firefox and add it again manually. Is this a known problem? Would it be possible, that a new Version of CCK could remove a CA and add it again afterwards? I guess, this would circumvent the problem.
Regards.
Unfortunately removing CAs is non trivial for the CCK2 (and the cert team said it was unreliable anyway at shutdown).
Are you using Windows?
