Where to report an issue with certificate distrust in firefox on a server with GUI?

Latest response

Hello,
I'm running a RHEL 7.4 Server with GUI. Firefox 52.4.0 (64-bit) is included in this version.

While accessing a website with firefox from this machine, the browser blocked the connection and tells me that the connection is not secure because:

The certificate is not trusted because it was signed using a signature algorithm that was disabled because that algorithm is not secure.

Error code: SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED

I've visited the same site with a Firefox ESR 52.4.1 (32-bit) from a windows machine and I do not get an error here. So I've checked the signature algorithm of the certificate in question and it is:

Signature Algorithm: sha256WithRSAEncryption

IMHO this should be considered as secure. But now the following questions are going around in my head:

  1. Is it a bug or a feature?
  2. Is there anything fishy with the certificate?
  3. If it seems to be a bug, where should I report it?

My machine has a development subscription. So I cannot open a support ticket. Should I report this issue in the Red Hat Bugzilla or in the bugtracker of Mozilla?

I'm happy if someone could provide some advise here.

Best regards,
Joerg

JK

Responses