Unexplained Mysteries Discussion Forums > Firefox Error Code: -8102

Unexplained Mysteries Discussion Forums > Other > Computers, Gaming & The Internet > Computing Help and Support

ktmanz

Oct 13 2006, 11:24 AM

Every time I try to connect to a particular site I get the following message.

Could not establish an encrypted connection because certificate presented by "certain site" is invalid or corrupted. Error code: -8102

This only began happening 3 days ago. Previously had no problems connecting. I can connect to site thru IE

Regards
Kim

ktmanz

Oct 13 2006, 11:36 AM

I have followed the solved problem from "Daughter of the Nine Moons" and I have already tried all the suggestions with no luck!!

<bleeding_heart>

Oct 13 2006, 05:39 PM

Does IE give a warning about the certificate signer being untrusted and an option to proceed while Firefox will only give you an OK option and once clicked does nothing?

ktmanz

Nov 30 2006, 12:33 PM

QUOTE(<bleeding_heart> @ Oct 13 2006, 05:39 PM) [snapback]1388708[/snapback]

Does IE give a warning about the certificate signer being untrusted and an option to proceed while Firefox will only give you an OK option and once clicked does nothing?

ktmanz

Nov 30 2006, 12:34 PM

Yes firefox just gives me the message then click ok then nothing!

Episteme

Dec 2 2006, 06:34 AM

Yuck, you won't like this answer. I will give it to you in the form of a quote. Be thankful it's not a sonnet, coming from me that would be much harder to read...

QUOTE

The problem lies in the certificate issued by the Certification Authority. The certificate uses an extension that indicates what the certificate can be used for. The CA accidentally hadn't set the SSL server extension so the certificate was not valid as a SSL server certificate.
Internet Explorer does not check this and just assumes that it's a valid SSL server certificate. Mozilla on the other hand checks this and correctly refuses to go to the site. The error message in Mozilla is not the best but that's it also being worked on. So it turns out that Internet Explorer just don't care about security. Mozilla cares about security and therefore checks the certificate to see if it is valid to be a SSL server certificate. Another win for Mozilla!

Source

I'd hit up the webmaster with an email and tell them about the bug. They need to fix the problem with the CA so mozilla users can connect. From what I see at other sites, the above appears to be accurate. This article is 3 years old and internet explorer still isn't checking extensions...

Abhishek Gautam

Jul 13 2007, 02:51 AM

QUOTE(ktmanz @ Oct 13 2006, 11:24 AM)

Regards
Kim

This problem is because of key usage extension present in server cert.

check the certificate associated with that site,
SSL rfc suggest "When a key usage extension is present, the digitalSignature bit must be set for the key to be eligible for signing and the keyEncipherment bit must be present to allow encryption."

so probably in your case:- website is sending certificate which contains key usage extension where digital signature bit is not set.

IE wont validate certificate extensions to such a great extent. Therefore connection will pass here.

cheers

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.