Bug 1766895

Summary:

Firefox MOZILLA_PKIX_ERROR_MITM_DETECTED

Product:

[Fedora] Fedora

Reporter:

Gerald Zehetner <gerald>

Component:

firefox

Assignee:

Gecko Maintainer <gecko-bugs-nobody>

Status:

CLOSED DUPLICATE

QA Contact:

Fedora Extras Quality Assurance <extras-qa>

Severity:

unspecified

Docs Contact:

Priority:

unspecified

Version:

CC:

0xalen+redhat, anto.trande, gecko-bugs-nobody, gerald, jhorak, john.j5live, kengert, pjasicek, rhughes, rstrode, sandmann, stransky

Target Milestone:

---

Target Release:

---

Hardware:

x86_64

OS:

Linux

Whiteboard:

Fixed In Version:

Doc Type:

If docs needed, set a value

Doc Text:

Story Points:

---

Clone Of:

Environment:

Last Closed:

2019-10-30 09:30:00 UTC

Type:

Bug

Regression:

---

Mount Type:

---

Documentation:

---

CRM:

Verified Versions:

Category:

---

oVirt Team:

---

RHEL 7.3 requirements from Atomic Host:

Cloudforms Team:

---

Target Upstream Version:

Embargoed:

Attachments:

Description	Flags
Screenshot	none

Description Gerald Zehetner 2019-10-30 08:50:00 UTC

Created attachment 1630439 [details]
Screenshot

Description of problem:
Sometimes when opening duckduckgo.com Firefox stops loading the page with MOZILLA_PKIX_ERROR_MITM_DETECTED error.



Version-Release number of selected component (if applicable):
70.0-1.fc30

How reproducible:


Steps to Reproduce:
1. Open Firefox
2. Browse to duckduckgo.com
3.

Actual results:
MOZILLA_PKIX_ERROR_MITM_DETECTED

Expected results:
Show page.

Additional info:
Some other user with the same problem on stackexchange: https://superuser.com/questions/1483291/why-am-i-having-an-issue-with-some-ssl-certificates-in-firefox

Comment 1 Gerald Zehetner 2019-10-30 09:00:33 UTC

Error just cam back:

https://duckduckgo.com/?natb=v170-1__&cp=atbhc

Ihre Verbindung wird durch einen TLS-Proxy kontrolliert. Deinstallieren Sie diesen falls möglich oder richten Sie Ihr Gerät so ein, dass es dem Stammzertifikat des TLS-Proxies vertraut.

HTTP Strict Transport Security: true
HTTP Public Key Pinning: false

Zertifikatskette:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 2 Martin Stransky 2019-10-30 09:28:20 UTC

This is a variant of Bug 1752303.

Comment 3 Martin Stransky 2019-10-30 09:30:00 UTC


*** This bug has been marked as a duplicate of bug 1752303 ***