Red Hat Bugzilla – Bug 1303138
[FF45] Shared System Certificates not honored
Last modified: 2016-06-06 09:40:30 EDT
Description of problem:
RHEL 7 contains Shared System Certificates from the very start and Firefox up to 38 took CAs from there as trusted. FF45 no longer trusts these CAs
Version-Release number of selected component (if applicable):
Steps to Reproduce:
wget -P /etc/pki/ca-trust/source/anchors \
2. restart firefox, go to https://errata.devel.redhat.com/
errata.devel.redhat.com not trusted
errata.devel.redhat.com is trusted
this worked like charm in ESR 38 -> Regression
The available 45 builds uses Mozilla in-tree NSS which miss Red Hat special config. We need to retest when system nss is enabled.
Can you please test with latest FF for RHEL?
Sorry for delay. This is fixed for quite some time already.