Re: F-EOL versions of Firefox: How to remove co-opted Diginotar CA?



On Tue, 06 Sep 2011 07:19:22 -0700
"Daniel B. Thurman" <dant@xxxxxxxxx> wrote:

For EOL FF versions, how can I remove the co-opted
Diginotar CA certificate? Instructions given by Mozilla
does not remove this certificate.

I think you'll need to build a newer Firefox (and remember for a no
longer supported release the CA certificates are by now I believe not the
only problem you have, and actually probably not the most serious)

So you need a new firefox which will need various other bits updating
which means you can either

- rebuild the needed source rpm packages against your old release
- upgrade either the packageds needed or the box to a supported release
- see if the Centos packages do the job (which for releases close to
their FC origin probably works out)

Remember to make sure the bits firefox assumes are secure (graphics
libraries notably) have also been upgraded with any post FC13 end of
release hole fixes. It very rapidly becomes easier to migrate to a
supported release !

Alan
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines



Relevant Pages

  • Re: Firefox: loss of configuration across upgrade
    ... realizing an upgrade might have something to do with it, ... I would suspect that you had another crashed instance of firefox on your ... The update scripts will of course not just kill or restart ... number of X packages I also log out and restart X after the upgrade. ...
    (Debian-User)
  • Re: WGA Update, part II
    ... It may be that one of your extensions in Firefox is causing this issue, ... the certificate will continue to work. ... certificates that are required by Windows 2000, by Windows XP, and ... "Download updates, but let me decide when to install them." ...
    (microsoft.public.windowsxp.general)
  • Re: lists.ntp.org uses an invalid security certificate....
    ... the warning: ... "The certificate is not trusted because the issuer certificate is ... Perhaps my Firefox needs something? ... Neither of the URLs given above are using https, they are both http://..., ...
    (comp.protocols.time.ntp)
  • Re: lists.ntp.org uses an invalid security certificate....
    ... the warning: ... "The certificate is not trusted because the issuer certificate is ... Perhaps my Firefox needs something? ... Neither of the URLs given above are using https, they are both http://..., ...
    (comp.protocols.time.ntp)
  • Re: digital signature/certificate in open office 2.0
    ... On 14/11/05, Craig White wrote: ... >> Now, when you run open office, you can choose the certificate with ... > creating the certificate, then importing it into firefox, exporting it ...
    (Fedora)