PKI Tutorials - Herong's Tutorial Examples - Version 2.04, by Dr. Herong Yang
Failing to Import Root CA Certificates to Firefox 35
This section provides a tutorial example on how to import a root CA certificate into Firefox 35. The import process failed with an error.
If I don't want to add a security exception to trust the Yahoo site when Firefox gives me the "This Connection is Untrusted" error, I need to fix the error.
Since I know why I am getting the "This Connection is Untrusted" error on the Yahoo login page, I can try to fix by importing the root CA certificate "VeriSign Class 3 Public Primary Certification Authority - G5" back into Firefox 35 from the certificate file I created earlier.
1. Run Firefox 35, and go to the "Tools" > "Options..." menu.
2. Click the "Advanced" icon, then click the "Encryption" tab.
3. Click the "View Certificates" button. The Certificate Manager dialog box shows up.
4. Click the "Authorities" tab since I want to import a CA (Certificate Authority) certificate.
5. Click the "Import" button. The "Select File containing CA certificate(s) to import" dialog box shows up.
6. Find and select \temp\VeriSign_Root_CA_pem.crt, which contains the "VeriSign Class 3 Public Primary Certification Authority - G5" certificate I created earlier.
7. Click the "Open" button to let Firefox import the certificate. Surprisingly, I got an error message box saying that "This certificate already installed as a certificate authority."
Why I am getting this error? I remember I deleted "VeriSign Class 3 Public Primary Certification Authority - G5" certificate from Firefox. Read the next section to find out the answer.
Last update: 2015.
Table of Contents
Introduction of PKI (Public Key Infrastructure)
Introduction of HTTPS (Hypertext Transfer Protocol Secure)
Using HTTPS with IE (Internet Explorer) 10
Visiting "https" Web Site with Firefox 35
Viewing Server Certificate in Firefox 35
Server Certificate General Information
Viewing Server Certificate Path in Firefox 35
Exporting Server Certificate to File in Firefox 35
Viewing Pre-Installed Certificates in Firefox 35
Listing of Trusted Root CA in Firefox 35
Exporting Certificate to File from Firefox 35
Deleting Root CA Certificates from Firefox 35
Firefox 35 Displaying Certificate Error Page
Adding Security Exception in Firefox 35
►Failing to Import Root CA Certificates to Firefox 35
Certificate Trust Settings in Firefox 35
Perl Scripts Communicating with HTTPS Servers
PHP Scripts Communicating with HTTPS Servers
Java Programs Communicating with HTTPS Servers
Certificate Stores and Certificate Console
.NET Programs Communicating with HTTPS Servers
CAcert.org - Root CA Offering Free Certificates
PKI CA Administration - Issuing Certificates
Digital Signature - Microsoft Word 2007
Digital Signature - OpenOffice.org 3