Mozilla_pkix_error_key_pinning

Pkix Path Build Failed
Gradle Pkix Path Validation Failed
Mozilla_pkix_error_key_pinning_failure Google
Pkix Path Building Failed Error

Vgy.me is a free and easy-to-use image hosting service hosted in the UK. Upload anonymously or create a free account to manage your uploads. MOZILLAPKIXERRORKEYPINNINGFAILURE: SECERRORPATHLENCONSTRAINTINVALID: SECERRORUNKNOWNCRITICALEXTENSION: A certificate contains an extension marked as critical that is not handled by mozilla::pkix: Re-generate the certificate without the extension or with it not marked as critical SECERRORUNKNOWNISSUER.

Please read this before reporting a bug:
https://wiki.archlinux.org/index.php/Reporting_Bug_Guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!

Problem: Some websites with security certificates don’t open and show error like ” MOZILLAPKIXERRORKEYPINNINGFAILURE”, in that case, you can fix it and able to browse by below fix.
Sep 15, 2014 MOZILLAPKIXERRORKEYPINNINGFAILURE: SECERRORPATHLENCONSTRAINTINVALID: SECERRORUNKNOWNCRITICALEXTENSION: A certificate contains an extension marked as critical that is not handled by mozilla::pkix: Re-generate the certificate without the extension or with it not marked as critical SECERRORUNKNOWNISSUER.

Tasklist

FS#52080 - [firefox] 50.0.2-1 SSL errors behind ssl scanning proxy

Attached to Project: Arch Linux
Opened by Ido van Verseveld (idovitz) - Thursday, 08 December 2016, 10:54 GMT
Last edited by Evangelos Foutras (foutrelis) - Monday, 16 April 2018, 23:12 GMT

Reported Version
Task Type	Bug Report
Category	Packages: Extra
Status	Closed
Assigned To	Jan de Groot (JGC) Evangelos Foutras (foutrelis) Jan Alexander Steffens (heftig)
Architecture	x86_64
Severity	Medium
Priority	Normal
Due in Version	Undecided
Due Date	Undecided
Percent Complete
Votes	4 Jan Hicken (Brinox) (2017-02-01) Johannes Pointner (h4nn35) (2017-01-30) Malte Rabenseifner (Zearan) (2016-12-22) Jeremy M. (jskier) (2016-12-09)
Private	No

Details

From firefox 50+ i got ssl errors on my work-pc:
configuration:
firefox 50+ <= proxy 8080 => SOPHOS UTM ssl scanning <= ssl connection => webserver
I added a signing proxy CA cert in firefox..
On some sites is ssl going well on some sites:
error 1:
An error occurred during a connection to accounts.google.com. The server uses key pinning (HPKP) but no trusted certificate chain could be constructed that matches the pinset. Key pinning violations cannot be overridden. Error code: MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE
error 2:
Normal ssl error about the match cert common vs domain. See attached screenshot (bugs.archlinux.org). I checked the cert, the proxy is generating a valid cert.
This is only the case when using a 50+ arch build. Releases Linux/Windows downloaden on mozilla.com are working fine. Is there a certain patch or build option different, causing this?

Pkix Path Build Failed

Closed by Evangelos Foutras (foutrelis)
Monday, 16 April 2018, 23:12 GMT
Reason for closing: Fixed
Additional comments about closing: Probably fixed since Firefox 54.

Duplicate tasks of this task (0)

Please enable JavaScript in your browser to use all the features on this site.

ClosedBug 1346236Opened 4 years agoClosed 4 years ago

Gradle Pkix Path Validation Failed

(Firefox :: Security, enhancement)

For bugs in Firefox Desktop, the Mozilla Foundation's web browser. For Firefox user interface issues in menus, bookmarks, location bar, and preferences. Many Firefox bugs will either be filed here or in the Core product. Bugs for developer tools (F12) should be filed in the DevTools product. (more info)

normal

Tracking

()

RESOLVED FIXED

Firefox 55

Tracking	Status
firefox52	---	wontfix
firefox53	---	wontfix
firefox54	---	fix-optional
firefox55	---	fixed

References

Attachments

(1 file)

59 bytes, text/x-review-board-request

: review+

Details

Status: NEW → ASSIGNED