PKI Tutorials - Herong's Tutorial Examples - Version 2.04, by Dr. Herong Yang
Firefox 35 Displaying Certificate Error Page
This section provides a tutorial example showing that Firefox 35 fails to validate an HTTPS server certificate and displays a certificate error page.
Now I want to see how Firefox 35 behaves after I deleted the root certificate "VeriSign Class 3 Public Primary Certification Authority - G5".
1. Open Firefox 35 to visit "https://login.yahoo.com".
2. Firefox 35 returns with an untrusted connection error page:
3. Read the error message:
This Connection is Untrusted You have asked Firefox to connect securely to login.yahoo.com, but we can't confirm that your connection is secure. Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified. What Should I Do? If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue. Get me out of here! Technical Details I Understand the Risks
Firefox 35 fails to validate "login.yahoo.com" certificate as expected, because the root CA "VeriSign Class 3 Public Primary Certification Authority - G5" certificate has been deleted from Firefox.
Last update: 2015.
Table of Contents
Introduction of PKI (Public Key Infrastructure)
Introduction of HTTPS (Hypertext Transfer Protocol Secure)
Using HTTPS with IE (Internet Explorer) 10
Visiting "https" Web Site with Firefox 35
Viewing Server Certificate in Firefox 35
Server Certificate General Information
Viewing Server Certificate Path in Firefox 35
Exporting Server Certificate to File in Firefox 35
Viewing Pre-Installed Certificates in Firefox 35
Listing of Trusted Root CA in Firefox 35
Exporting Certificate to File from Firefox 35
Deleting Root CA Certificates from Firefox 35
►Firefox 35 Displaying Certificate Error Page
Adding Security Exception in Firefox 35
Failing to Import Root CA Certificates to Firefox 35
Certificate Trust Settings in Firefox 35
Perl Scripts Communicating with HTTPS Servers
PHP Scripts Communicating with HTTPS Servers
Java Programs Communicating with HTTPS Servers
Certificate Stores and Certificate Console
.NET Programs Communicating with HTTPS Servers
CAcert.org - Root CA Offering Free Certificates
PKI CA Administration - Issuing Certificates
Digital Signature - Microsoft Word 2007
Digital Signature - OpenOffice.org 3