Firefox can't analyze my certificate while IE can. I imported my this at once, IE is fine, Firefox says that the certification is valid for the period of INQUIRY only, not the DNS name
Details: - created a CA with PfSense - created server SSL certificates imported from my own servers (ESX, PfSense, email,...) -the authority of certification in Internet Explorer as a certification authority root of new trust - connect to my server with their local DNS names and receive the page without warning - any HQ in Firefox as a new authority - to connect to my server using the DNS name - a error message: certificate is valid only for 172.31.1.20 (the IP address of the server) - to connect to my server using Firefox and the IP address and receive the page without warning
The AC is very good because it is used by IE and Firefox and even complaining, Firefox don't doubt the authority. The server certificate does not include the name, and can find it. It is true that when I created the certif, I added an additional field with the IP address. The certificate should be valid for both the DNS name and IP address. When I try to connect to the server with IE using the IP address, now it's THE who complains that the certificate is valid for the name :-)
What should I do for Firefox to accept my certificate in his name and validate with the CA instead of making several exceptions for everything?
This is the certificate sent by the server:
BEGIN CERTIFICATE-----
MIIF5jCCA86gAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgTELMAkGA1UEBhMCQ0Ex DzANBgNVBAgTBlF1ZWJlYzERMA8GA1UEBxMITW9udHJlYWwxDTALBgNVBAoTBEhv bWUxGzAZBgkqhkiG9w0BCQEWDGFkbWluQGpiLmxhbjESMBAGA1UEAxQJSkJfTGFu X0NBMQ4wDAYDVQQLEwVJVFNlYzAeFw0xNjExMTIwMjI1MjRaFw0yNjExMTAwMjI1 MjRaMIGCMQswCQYDVQQGEwJDQTEPMA0GA1UECBMGUXVlYmVjMREwDwYDVQQHEwhN b250cmVhbDENMAsGA1UEChMESG9tZTEbMBkGCSqGSIb3DQEJARYMYWRtaW5AamIu bGFuMRMwEQYDVQQDEwplc3guamIubGFuMQ4wDAYDVQQLEwVJVFNlYzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMWoRcxHoBjR2rKOPAI/dtpWlTiqOGDg zZZWJ6n24ZYUfh9L6vUmzqajfAbj6 + fndzKahb69PLi + tsnt39yGsKWkXUd3y7Wq 5PkaGSqi/mJKB7/H0qL4Ig2FK9/uK9QGK019NvDN1jnLgF6MoNAIZEOVjqalpnXD O8Eu + vaKPsHbvNziNj7uQR8CdcMU9lEF6gcmFu8xOrukb3ocpyJ307PHqx3AlrU0 sBuit21glineB9XKMyBaon9D3mrNUXmvHy3xcBvHPwcgqnNDKd7CZwdfaXw4Hb4i t7BYgSsn66UxPcrDvoho9aDbXnjmOuPCo/FMsZxfr9ETZyGIllsXE2UCAwEAAaOC AWQwggFgMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgZAMDMGCWCGSAGG BEI DQQmFiRPcGVuU1NMIEdlbmVyYXRlZCBTZXJ2ZXIgQ2VydGlmaWNhdGUwHQYDVR0O BBYEFEILwkf/4I50YT + fZ/2wcETS6CBVMIGuBgNVHSMEgaYwgaOAFEgmUROxoVJM txyWvypJ4wcF8B2RoYGHpIGEMIGBMQswCQYDVQQGEwJDQTEPMA0GA1UECBMGUXVl YmVjMREwDwYDVQQHEwhNb250cmVhbDENMAsGA1UEChMESG9tZTEbMBkGCSqGSIb3 DQEJARYMYWRtaW5AamIubGFuMRIwEAYDVQQDFAlKQl9MYW5fQ0ExDjAMBgNVBAsT BUlUU2VjggEAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQgCAjALBgNVHQ8E BAMCBaAwDwYDVR0RBAgwBocErB8BFDANBgkqhkiG9w0BAQsFAAOCAgEABCFChNXJ ACISI + 7hNbpiwIsjpDB0fLKB/9sPXC1uiwzGv7o/fkImYPJzQcKP0a3V6elX4kd7 x1poYAfawVIpKJgwzgEWnMJADgPKVMymkxBr3Qlq + 3oAiC4pTdI79GKaZKshxANS 7OBoklRDYWStHnCdw96IWuu6Ih2mbsbRVUFIJnHPHpCFS1J45tLYWoxPL/L1uX3v /Pz8SollYXtZ +. uVhdkkzJcHcEsZjvBe3eMmxm93l7Cy/5kCDf2 + kx67weNRrxbFt VaEyFCypCJlJn4Gj17y0JnhPUN1/h7Ck4XcTLX28 + Ab2Ls9/rXnXMQvkKcrRhvyT CV4XJ756hap/zT + KJJzY8 + T5ggdkKlcbZsvvgVSuNNv1aSQmR + bbF5ry23oszXVO FaEEAtcofaHa5MMebNNWrz4o/qYuPGBnVq3NmxiNNKm + / Ed5ky4AdkXT7Ny11mgA C2DzGahyXfbfGFa21ig/R0NAxkP00TXWiuSE/7 b/EGe9qNDB + WF7Qb5I9U6EoWYZ EEmE8G/43ClaZCorJJN7iZwwMx2iQJgyuea hy9hgXU5GjmXmrpqmtvyGxrywalcXPzvFOs + aSXf1H2tLSMc9n3LH8g0lDgpcC6P484ef1cmG3/hVD5QLWyjblMnF0XjbMyij5Hj eTrPLTwW8AYjoIz0DZRoVPxpdz/o =
CERTIFICATE OF END-
This is the certificate of the CA that signed it
BEGIN CERTIFICATE-----
MIIGbjCCBFagAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgTELMAkGA1UEBhMCQ0Ex DzANBgNVBAgTBlF1ZWJlYzERMA8GA1UEBxMITW9udHJlYWwxDTALBgNVBAoTBEhv bWUxGzAZBgkqhkiG9w0BCQEWDGFkbWluQGpiLmxhbjESMBAGA1UEAxQJSkJfTGFu X0NBMQ4wDAYDVQQLEwVJVFNlYzAeFw0xNjExMDYxMTQzNTJaFw0zNjExMDExMTQz NTJaMIGBMQswCQYDVQQGEwJDQTEPMA0GA1UECBMGUXVlYmVjMREwDwYDVQQHEwhN b250cmVhbDENMAsGA1UEChMESG9tZTEbMBkGCSqGSIb3DQEJARYMYWRtaW5AamIu bGFuMRIwEAYDVQQDFAlKQl9MYW5fQ0ExDjAMBgNVBAsTBUlUU2VjMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtRfmJ8HhxD6OeBSTdiK36DF/Gw7HmOIO CN9LktUCcnXZfsbkyPwGq8AtLTURfYU1VKHw066g0XD0hEbFEaYIWvVKijiqaPZg Pc / pIAj + M7vzojeCnv6QiRTcC9q5rY9 + Ff7MuTkWKEPzjuXpHd + IoS4To3sVZgsy YcxrdRndcirxm6aFjGXIYaImPm3hLuMteSagacsjduGEDOpJ5hJoMIIX4kHE/x8J DFBvlllXIGiOgCHU + 8hcN1IadNFqQcWA3eFB5SgLPFxOOmR4xpB1LsrESC4Zgk/E XmZYBCsYHzg58Cq6r4xuwckutcd5Gjo9ujaafCfAlUFHFJxqLxyy + N0nd3P + i5Kd zPpwpyIAzOCPeZvM2chspspl3pER + RlqZODLoU3gSAz4z + knxKxeyyiK8cttMHkV Di5veqSRIxYeYtJqu0asEaBiQ0ZpdqsNcQEU3rwzo6uoxxgvRr2Ujb6csr8CqhuA 2Sz0W1upgcpZhuL0VMTkMS8P8fgzZZeIU85v7drldXsvpjzaMwHdm/MKGewA0eCZ fUTI6V + uY9oaT9GH8MPzGWzB4oYb3sRgKgLkvWGckyHe3YVwUpb4z/MXRFB3bN/Z qxIyochY8pJMcJe2jrTw79Sf9FAR/txonPBAxuNtGLIdcL4ElGjlXPDXlQrI8XbI n/Abbs3iFHsCAwEAAaOB7jCB6zAdBgNVHQ4EFgQUSCZRE7GhUky3HJa/KknjBwXw HZEwga4GA1UdIwSBpjCBo4AUSCZRE7GhUky3HJa / KknjBwXwHZGhgYekgYQwgYEx CzAJBgNVBAYTAkNBMQ8wDQYDVQQIEwZRdWViZWMxETAPBgNVBAcTCE1vbnRyZWFs MQ0wCwYDVQQKEwRIb21lMRswGQYJKoZIhvcNAQkBFgxhZG1pbkBqYi5sYW4xEjAQ BgNVBAMUCUpCX0xhbl9DQTEOMAwGA1UECxMFSVRTZWOCAQAwDAYDVR0TBAUwAwEB /zALBgNVHQ8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBAHVLp0nsXNHjvcjWado0 v1M167gEv8SnLMzDRJ7rOwfQlG0JWIXgrMk + 9bLQixFPbClG2MzOGhq2gyXbTFEH PYLfOxRy5gsrYhBYKso4PNrP8ouBaedl / + huobFtd1SR4bNrZ5Be3crQkZhULmlv hSVWklOC + o0rdfPnDffDRtoWH1x1 / + ZRS0N0MSwXqeoQTEgu9CYRCEeLnidcdd1v e6XR + Qw2qLfPqBCKzCVNGZvpVjqakERxaLgWPqwixIQ4sdPjvtnUJxsUEo5hN + 6 / + os/HZ1iO3Bgi6DgAGToTSmsf5 + pI/z + o2FjDrDvbBhvf4FulvvOCsRBNkA5BK NgisFXP / FN3WlkrbM1OZjWIan1phQAw5mDLfqwxJE + BuedK1HqLRNTay9eOGSRSu TRIi26fwwMAdsPnDj3X7/aUCWslVrvZPRmsIOgykLuHlCgYD99mpzF0v + t8y05iE V3115CCve + qFHH52j078jxo1aKyfQTnRGvdGehWI77Pd/l9CMgNJ7K0ZRx6RUoEV 9CMH6kgqagkXU7eT2CXszxrGHAgybnNaJ/z4BjxDme0TH3bgLc4AOIiP8doe7KlJ lYvrG8UMtCkL1jhYFX4Rz/BH5yte7aqzwBVUZrcmvM2gU9ZyPNaAfCDygCUMeMqt OWQEicvGZtRj2ZK6PKv5hk0a
CERTIFICATE OF END-
In Firefox, a list of other names of the non-empty object overrides and replaces the common name field. If you need to list all the relevant host names in the field of SAN in your certificate.
Tags: Firefox
Similar Questions
-
I can't import my new Nikon D750 RAW files in Lightroom after that I downloaded files using NX2. Solution? 5 Lightroom not does support the D750 yet?
See this thread.
-
The above message appears when I try to install the new version of firefox. It will not let me install new version. I don't know how to fix it. Please notify.
Try a custom installation.
-
I worked on the Web site of our Church and all of a sudden this week, my computer does not connect to the site. I get a message saying that the connection to the server was reset while the page is loading. Can anyone has any ideas on how I fix?
The error message "the connection was reset" can be caused by a bug for the attack of the BEAST fix (browser exploit against SSL/TLS) that the server does not support.
-
Can't send or receive messages on behalf of Live.co (apermaculture). The connection name specified does not exist or your password is incorrect.
Server error: 0 x 80048821
Server: 'http://mail.services.live.com/DeltaSync_v2.0.0/Sync.aspx '.
Windows Live Mail error ID: 0 x 80048821Hi Nic of Necker,
When you use Windows Live Mail and the question you have posted is related to Windows Live, so it would be better suited in the Windows Live community. Please visit the link below to find a community that will provide the best support.
Windows Live Mail Forum
http://www.windowslivehelp.com/forums.aspx?ProductID=15
I hope this helps.
-
I am trying to use remote assistance to help with my brothers computer. We both use XP, but when I try to open remote assistance to view and or even take control of his computer, I get an error message: connection A Remote Assistance could not be established because the DNS name of the remote computer cannot be resolved. Why this might be happening?
Hello
It depends on how the computers are connected and their intellectual property regime.
They are on the same network (e.g., connected to the same router)?
Through the Internet? Something else?
http://support.Microsoft.com/kb/300546/en-us
Jack - Microsoft MVP, Windows networking. WWW.EZLAN.NET
-
I am trying to accept an invitation from my mom's remote assistance and this is what I got after entering the password: connect Remote Assistance could not be established because the DNS name of the remote computer cannot be resolved.
You get the error "a Remote Assistance connection could not be established because the DNS name of the remote computer could not be resolved" when the requesting computer (the computer 'demand' help) sends its private IP address instead of its public IP address in the request for assistance. The solution is 'easy' for some and difficult for others. I present here for your perusal:
(1) obtain the public IP address of the requesting computer (by visiting a web page such as http://www.whatismyip.com)
(2) save the remote assistance request computers
(3) modify the remote request for Assistance (RcBuddy.MsRcIncident) using a text editor (such as notepad) and replace the private - section of IP address should be something like this:
RCTICKET = 65538,1,192.168.1.33:3389 «»
with the public IP address from whatismyip.com or elsewhere - should be something like this:
RCTICKET = 65538,1,74.125.47.147:3389 «»
(4) save the file of RcBuddy.MsRcIncident 'new '.
(5) double click it to connect to the computer needing help
(6) cross your fingers and hope it works!I hope this helps someone else - if it's too much trouble, feel free to use the tools mentioned elsewhere in this thread.
-Computers Acorp
www.ACoRP.net -
Hi, when you try to copy a folder with lots of subfolders, some files don't copy. I get a message that the folder names are too long, and the only option is to ignore these files. Anyone know the maximum folder (and also) name length that will copy windows 7?
Thank you
Steve M
Helloa. What are the data you're trying to move?b. what operating system (for example Windows files) files?c. What is the method that you use to copy data?Windows 7 supports filename up to 260 characters. I would ask you to decrease the characters in the file name and then try to copy the files.
Let us, run disk checking hard disk utility and then check.Here's how:
1. open the computer by clicking the Start button, click computer.
2. click on the drive you want to check, and then click Properties.
3. click on the Tools tab and then, under check for errors, click Find now. If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.
To automatically repair problems with files and folders that the scan detects, select automatically fix file system errors. Otherwise, the disk check will be a problem, but not to fix them.
To perform a thorough check, select search and attempt to recover bad sectors. This analysis tries to find and repair physical errors on the disk itself, and it may take much longer to complete.
To check for errors file and the physical errors, select both automatically fix errors in file system and search for and attempt recovery of bad sectors.
4. click on start.Depending on the size of your drive, it may take several minutes. For best results, do not use your computer for any other tasks while it checks errors.Important: Running chkdsk on the drive if bad sectors are found on the disk hard when chkdsk attempts to repair this area if all available on which data can be lost.I hope this helps.Thank you, and in what concerns:
Shekhar S - Microsoft technical support.Visit our Microsoft answers feedback Forum and let us know what you think.
If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly. -
What it means that the DNS server instead sends a node adapter directly status request to the IP address involved in the reverse DNS query. When the DNS server gets the NetBIOS name of the node status response, it adds the DNS domain name specified in the WINS - R record the NetBIOS name provided in the node status response and passes the result to the client applicant. ?
Hello
Please repost these questions in the Technet Forums
http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer
See you soon.
-
Original title: widows installation problem
I have Windows XP Professional running on a desktop older. I cleaned the disk and I would use it only as a 'internet '. It works well and response times are pretty fast, but when I connect I get a box that says "Please wait while Windows configures FAX"... this process stops and I get another message that says "the component you are trying to use is on a CD-ROM or another removable disk that is not available", "put the 'FAX' disk and click OK. , "" Use Source: '1' "»
The first question is I do not use a fax application and never did, I have tried every disk I can think of to complete the process, but I get the same message with each one 'the path '1' is not found. "Make sure you have access to this place and try gain or find the installation 'FAX, MSI' package in a folder from which you can install the FAX product." .. then "error 1706 - FAX." Valid any source not found for the FAX product. Windows Installer cannot continue. »
This will take place two or three times at the beginning upward. How can I prevent Windows Setup tries to install something that I do not use or do not seem to have? I deleted any fax program, that I could find on the computer, and nothing seems to work.
Hello
1. have you done any change in software on the computer lately?
2. are you able to install other applications and programs successfully?Check to see if the problem exists in Safe Mode, if the computer works as expected in mode without failure, then we can solve the problem in the clean boot state. There is an application which is set to start when you start the computer and which launches the installer of Windows.
a. refer to the article below for the procedure safe mode in Windows XP
A description of the options to start in Windows XP Mode
http://support.Microsoft.com/kb/315222b. you need to perform a clean boot to find the program that is causing and then disable or remove.
How to configure Windows XP to start in a "clean boot" State
http://support.Microsoft.com/kb/310353/en-us
Note: When you are finished troubleshooting, follow the steps as explained in the article to reset the computer to start as usual.I hope this helps.
Thank you, and in what concerns:
Shekhar S - Microsoft technical support.Visit our Microsoft answers feedback Forum and let us know what you think.
If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly. -
Anyone know how to solve my problem? I can't import my photos from Iphone to computer. Sign says: Photos in the camera cannot be imported because the IPhone is locked with a password or read. My phone is unlocked. I tried everything, every single idea. Without success! Any other idea?
For example, you specify that the device does not display the lock screen, correct? Do you use Touch IDS? If so, try to put your finger on the device to see if it's what he wants.
See you soon,.
GB
-
Since the update to iTunes 12.4.1.6 I don't see my purchased music. When I try to import my old playlists I get a message saying that the library is not a valid iTunes library. Thus, thousands of songs and hundreds of films and I can't see or play one. I see my movie library where it is stored on an external hard drive, but my music was on my iMac.
Where all the playlists gone and why didn't appear my entire music library? I checked the preferences and iTunes points to the correct folder, BUT only my music purchased appears...
Same thing happened to me. I tried to replace iTunesLibrary.itl with an older copy, but that has not worked. Then I tried to return a version by resetting the Time Machine's iTunes app, but it would allow me to edit or delete iTunes because it is part of Mac OS X.
So, I can not sync my iPad or iPhone, update all apps or find my music, that is, the course of the odf, still on my hard drive. ITunes just can't see the library.
The difficulty of this Apple.
-
Hello, when I turn on my iMac it says that the keyboard is not connected. It is however a wireless keyboard. What can I do?
Hey scjane, take a look at this topic Support of Apple. It's been archived, but I think it's just for OS X 10.7...
Apple wireless keyboard: difficulties in matching the process - Apple Support
-
I try to sync a new phone 6 s with tunes11.4 and receive an error message saying that the phone cannot be used because it requires a newer version of itunes. I've updated the phone and itunes. can anyone help?
Sorry, iphone and itunes.
-
Would it not correct to say that the PCI-6110 can be set to 'redeclenchables' but the PXI-6115 module cannot use this property? If Yes, where is it documented the series cards can do trigger? For example, is it possible to configure the trigger on the PXI-6124?
Hi Joel_Neptune,
The PCI-6110 and other materials as the PXI-6115 S series and SMU-6124 do not natively support NOR-DAQmx analog input alarm. However, you can use one of the generalist counters/timers of the Council to generate a reenclenchees pulse train, then use this as the sample clock pulse train. This transportation example shows how:
LabVIEW\examples\DAQmx\Synchronization\Multi-Function.llb\Multi-Function-Ctr Retrigg Pulse Train generation for the Clock.vi sample
In addition, the new material of the simultaneous sampling X series are supported trigger analog input without using a separate task of counters/timers.
Brad
Maybe you are looking for
-
Got a new modem from comcast, but now my time capsule will blink orange. Utility box airport continues to appear on my screen. Says that it cannot connect to the new modem. When I click around. Looks like I'm missing a step easy connection to conn
-
Thin client HP 420: thin client usb problem
We test a workstation 420 and everything seems to work fine except when you are connected to an RDP session to our server 2012R2 farm, usb storage disks/keys are not recognized. Everything seems to be ok on the thin client in local resources and the
-
[Resolved] find versions and generations of MotoGP
There are (from August 2015) 3 'generations' of MotoGP. How can we distinguish between them, alias "distinguish their"? Note I am not asking "what is the best", or what are their different feature sets. What I'm asking is more like this: Suppose some
-
Gets the ati2dvag error message when online.
Original title: ati2dvag bug or problem. The ati2dvag bug does not disappear after the download and the application of new drivers for ati cards or bios for cards. I tried with own removal tools. The problem seems sturdiness only when running from we
-
It's really annoying because at the time of installation, we thought that 25 GB should be plenty for the drive that contains the operating system only! Now we ran out of disk space on C:! (The only software installed on top of Windows is SQLServer 20