MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE & unsecure message
Hi,
I'm not able to access https://pixabay.com/ as I get the message above (question bar) showing. Having checked out Q&A I tried deleting the cert8.db file then re-starting Mozilla, no joy. I am a bit reluctant to do a refresh as I'm unsure how it would affect my system? I am not that computer literate! I did do an SSL check & both their server & info bar url came back as A+.
Around the same time I now also can't access https://personofinterestdiscussion.com/ I did an SSL check & that came up with vulnerabiities. (I made a note of some if needed.) Their overall safety rating is F - grade capped to C . I haven't made any changes to my laptop lately (Windows 7) & haven't had problems accessing either site until a couple of days ago & I just don't know what to do to get back onto both. I have anti virus, anti spyware, anti malware etc installed with no problems, also Mozilla's website protection. I scan my laptop daily. This has came on so suddenly & I really want to get back onto both sites, so any help would be very much appreciated. Thanks! :)
Gekose oplossing
Thank you FredMcD & Tonnes :)
When I came online today I tried the PoI site again and got the same result so then I clicked on 'Advanced' which led me to a message saying there's a problem with their certificate, altho' the SSL test says their certificate is valid until 2019?! I had emailed the owner & they sent a link which led me to 'exceptions' so I altered the 'permission' and now I can access the site again, but with Mozilla showing a grey padlock with orange exclamation mark. The grey white shield notice says it is blocking parts of the page that may not be secure (the images) ...
Tonnes ... both links in the support column showed green.
I hope you don't think I have been a waste of your time and a complete doofus! I am so grateful to you both for your patience & all your help & sharing of knowledge, which hopefully will help me in the future become more PC literate! Many thanks. :)
Lees dié antwoord in konteks 👍 0All Replies (20)
I had no problem with your links. What error messages were displayed?
There is security software like Avast, Kaspersky, BitDefender and ESET that intercept secure connections and send their own certificate.
http://www.ehow.com/how_11385212_troubleshoot-reset-connection-firefox.html
https://support.mozilla.org/en-US/kb/server-not-found-connection-problem
https://support.mozilla.org/en-US/kb/firefox-cant-load-websites-other-browsers-can
https://support.mozilla.org/en-US/kb/firefox-and-other-browsers-cant-load-websites
https://support.mozilla.org/en-US/kb/secure-connection-failed-error-message
https://support.mozilla.org/en-US/kb/connection-untrusted-error-message
http://kb.mozillazine.org/Error_loading_websites
https://www.bing.com/search?q=web+site+access+denied
https://support.mozilla.org/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER
This Connection is Untrusted is sometimes caused because the computer system clock is wrong. Check the time / date / time zone settings.
Hi FredMcD,
thanks for replying & for the links. I get MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE for Pixabay & for the PoI forum, I get this ...
Your connection is not secure
The owner of personofinterestdiscussion.com has configured their web site improperly. To protect your information from being stolen, Firefox has not connected to this web site.
I did already check the clock/ime zone etc but all is ok. Security besides Mozilla & system is AVG, Malwarebytes, AOL spyware .. I have had these programmes for some time with no problems until now!
It looks like a certificate issue. Try this;
You may have corrupt cert8.db file. cert8.db stores all your security certificate settings
Type about:support in the address bar and press enter.
Under the page logo on the left side, you will see Application Basics. Under this find Profile Folder. To its right press the button Show Folder. This will open your file browser to the current Firefox profile. Now Close Firefox.
Locate the above file. Then rename or delete it. Restart Firefox.
Hi FredMcD ...
I did what you suggested & deleted the file, restarted, but I still can't access either site & checking the files again, cert8.db file is back! I just deleted it, it went into the bin which I emptied!
Firefox will create new files when needed, including the cert8.db file. I called for more help.
Ah, so it's made a new file, ok! I thought I was going mad! Thanks so much for your help.
One thing you should not forget now is to empty the browser cache. Clear every instance of the affected websites in History using Show All History, and also choose History > Clear Recent History where you can select cache, cookies, etc. You may need to disable and enable SSL scanning or protocol filtering in your antivirus product as well. Finally, revisit or reload the pages using Ctrl+F5.
I use the no tracking feature so no history shows, but I daily clear cache, cookies etc just done it again as advised. Sorry to seem thick, but I can't find where my SSL scanning or protocol filtering is, not very computer savvy! I just checked both sites again & I can finally get back on Pixabay, but not on the PoI forum!
Edit: I'm not sure but I think when I usually clear the cache & cookies I don't think I clear site preferences, but did this time after your advice.
Could you please advise where to find the SSL scanning or protocol filtering in my AV? The PoI forum has vulnerabilities as I tested (both sites) using SSL site as recommended, but I haven't had problems getting on there before, only when they were having problems themselves quite some time ago.
Thanks very much for your help Tonnes.
Gewysig op
If you wrote what AV product you use, I could and have would. :)
Does the How to troubleshoot security error codes on secure websites support article mention your product? Most likely, you should disable and in some cases re-enable the (or a similar) feature.
The Pol forum page contains mixed content so that may be the reason at this point, though it should still display properly.
Sorry Tonnes,
I have AVG Internet Security product version 2015.0.6201
(I don't have the listed Avast, Bitdefender, Bullguard, ESET, Kaspersky)
I also have AOL Superanti-spyware version 6.0.1204 Malwarebytes Anti Malware version 2.2.1.1043 Malwarebytes Anti-exploit version 1.9.1.1235
Thanks
Start Firefox in Safe Mode {web Link} by holding down the <Shift>
(Mac=Options) key, and then starting Firefox.
A small dialog should appear. Click Start In Safe Mode (not Refresh).
Is the problem still there?
Start your Computer in safe mode with networking. Then start Firefox. Try Safe websites. Is the problem still there?
Thanks FredMcD ...
I'll do that tomorrow, it's getting late here (UK) so I'll report back tomorrow, probably evening, my time.
Thanks to you & Tonnes for your help. :)
Good night. :)
You’re welcome and good night/morning. ;)
Apparently AVG isn’t able to scan SSL connections so that would be no issue.
You could however check and update exclusions in Malwarebytes Anti-exploit if needed, or uninstall it entirely. For one, I don’t trust it, reading back some reports; another thing is you should never use more than one security product (at least with the same purpose/features) on one system. Can you uninstall it and see what happens?
Thanks again FredMcD & Tonnes for all your help & patience. :)
FredMcD ... I started Firefox in safe mode, but still can't get on PoI forum. The other site is now fine. I'll try starting the computer in safe mode & will report back.
Tonnes ... thanks for letting me know about AVG & SSL scanning. I checked Malwarebytes Anti-exploit and it doesn't show any exclusions?! Neither does the other one! Re: uninstalling, will have to double check as I think I am paying for one (or both?!) head is a bit sieve like at the mo', a lot going on! Thanks for advice about running similar programmes. Of the two Malwarebytes, if I'm not paying for anti-exploit I'll try uninstalling and see if that makes a difference? Will report back!
Gewysig op
FredMcD ... I tried starting the computer in safe mode and (probably me!) it went into repair mode instead, FF 25 minutes later I finally got a message saying it couldn't repair automatically ! re-started, tried again but still no PoI forum access.
Tonnes ... I checked & I've paid for both Malwarebytes programmes! So, ?!? (I have had PUP secured by M & malicious virus secured by AVG at different times.)
I might try & contact the owners of the PoI site, see if anyone else is having problems. Their SSL server test reported vulnerabilities & their rating was poor- grade capped to C overall F.
If I do the Firefox refresh, how will it affect any programmes installed?
Thanks to both of you for your continued help & patience. I'll try & return later, if not, tomorrow. :)
If I do the Firefox refresh, how will it affect any programmes installed?
Normally installed programs run independent from each other. Programs written by the same programmers may share common files. And there are also plugins, like flash.
Hmm… I typed a piece of text but think it’s best if you try this first:
- Visit this page. Are both links in the Support column green? Do some more testing if you like (I think you do). :)
- Open your profile folder: go to Help > Troubleshooting Information or about:support and click Show folder.
- Close Firefox.
- Move the file SiteSecurityServiceState.txt out of the profile folder to another place.
- Retry https://personofinterestdiscussion.com/
Gekose oplossing
Thank you FredMcD & Tonnes :)
When I came online today I tried the PoI site again and got the same result so then I clicked on 'Advanced' which led me to a message saying there's a problem with their certificate, altho' the SSL test says their certificate is valid until 2019?! I had emailed the owner & they sent a link which led me to 'exceptions' so I altered the 'permission' and now I can access the site again, but with Mozilla showing a grey padlock with orange exclamation mark. The grey white shield notice says it is blocking parts of the page that may not be secure (the images) ...
Tonnes ... both links in the support column showed green.
I hope you don't think I have been a waste of your time and a complete doofus! I am so grateful to you both for your patience & all your help & sharing of knowledge, which hopefully will help me in the future become more PC literate! Many thanks. :)
Gewysig op
That was very good work. Well done. Please flag your last post as Solved Problem so others will know.
No problem, as long as you keep reading and follow suggestions. :)
Important to know: did you try the steps above (delete the file) before what you wrote above? If not, what changed things so you could add an exception today using Advanced, or was it possible earlier? (I thought you weren’t able to.)
The grey padlock with an orange/yellow exclamation mark is fine for this page as it contains mixed content as described in the How do I tell if my connection to a website is secure? article. However, you should not need to add an exception for this website, as the fault is at your end, not theirs, so I think you haven’t tried the steps.
In that case, if you have added a permanent exception by leaving the checkmark next to Permanently store this exception, could you remove it and try the steps?
First, open Options > Advanced > Certificates > View Certificates > Servers tab - you’ll probably find the website under The USERTRUST network, where you can delete it. Then retry the page so you should see the error again (you may need to reload using Ctrl-F5 and restart Firefox), then close Firefox, delete the file and retry.