Arch Linux

dotpencan

Member

Registered: 2021-01-24

Posts: 12

[SOLVED] SEC_ERROR_UNKNOWN_ISSUER error when visiting browserbench.org

No matter what browser I use, I get an error when I visit https://browserbench.org/ARES-6/.

Firefox error: Error code: SEC_ERROR_UNKNOWN_ISSUER
Chromium: NET::ERR_CERT_AUTHORITY_INVALID

I'm not sure if this is related, but the page https://www.apple.com/shop also fails to render correctly.

browserbench.org and apple.com/shop both work fine on Fedora.

Edit: gmail isn't working either. A lot of UI elements aren't showing up.

All of these sites were working fine in October.

Last edited by dotpencan (2021-01-27 11:49:32)

loqs

Member

Registered: 2014-03-06

Posts: 19,025

Re: [SOLVED] SEC_ERROR_UNKNOWN_ISSUER error when visiting browserbench.org

I was able to reproduce your findings using a new firefox profile.  The site was not flagged in my existing profile.  I can not determine what difference triggers the flagging.

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,599

Re: [SOLVED] SEC_ERROR_UNKNOWN_ISSUER error when visiting browserbench.org

Nothing wrong here on FF 84.0.2-1 with ca-certs-mozilla 3.61-1

loqs

Member

Registered: 2014-03-06

Posts: 19,025

Re: [SOLVED] SEC_ERROR_UNKNOWN_ISSUER error when visiting browserbench.org

@qinohe using a new profile made no difference?

New profile is issued a cert based on root GeoTrust Global CA with SHA-256 FF:85:6A:2D:25:1D:CD:88:D3:66:56:F4:50:12:67:98:CF:AB:AA:DE:40:79:9C:72:2D:E4:D2:B5:DB:36:A7:3A
Old profile is issued a vert based on root Baltimore CyberTrust Root with SHA-256 C9:B0:6C:C0:83:18:62:20:61:8E:61:A8:77:26:40:F8:24:DF:69:D5:61:AD:56:BD:C1:5A:D5:6D:0C:E0:86:08
Edit:
security.remote_settings.crlite_filters.checked and services.settings.security.onecrl.checked just updated and now the new profile can access the site.

Last edited by loqs (2021-01-25 00:31:44)

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,599

Re: [SOLVED] SEC_ERROR_UNKNOWN_ISSUER error when visiting browserbench.org

@loqs, Yes, with a new profile I'm in the same boat.
What do you mean by updated ? set them both to 1?

loqs

Member

Registered: 2014-03-06

Posts: 19,025

Re: [SOLVED] SEC_ERROR_UNKNOWN_ISSUER error when visiting browserbench.org

No I had about:config open showing crl and the value of those settings changed.  I assume a background job in firefox updated something and set those settings to timestamps.

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,599

Re: [SOLVED] SEC_ERROR_UNKNOWN_ISSUER error when visiting browserbench.org

Hmm, both are at zero and no updates, snippets are on...

edit : Am I right to assume both settings changed to:

["data", "time]

Although changing both of them without changing other preferences to the right value may lead to unexpected behavior, I know;-)

edit2: duh, I saw it change ;-)

Last edited by qinohe (2021-01-25 02:11:27)

dotpencan

Member

Registered: 2021-01-24

Posts: 12

Re: [SOLVED] SEC_ERROR_UNKNOWN_ISSUER error when visiting browserbench.org

I left Firefox open overnight, the values for security.remote_settings.crlite_filters.checked and services.settings.security.onecrl.checked both changed, and browserbench.org and apple.com/shop work now. The file containing the updated security data is ~/.mozilla/firefox/<profile>/security_state/data.safe.bin. However, gmail still isn't working. gmail works fine on Fedora. I access gmail mainly on my phone, so this isn't a problem for me. I'll mark this as solved anyway. Thanks.