Firefox 45, load certificates

[Eugene Gorbunoff]

Firefox 45 for os2
doesn't show sites with certificates "Let's encrypt"

// It doesn't relate to Russia blocade.

firefox 45.. refuses to open some sites, because of expired certificates (in Firefox). and we were doing something with firefox/2, did we?
it was 2024 (or 2023), there were world wide news (for any OS) that something will happen with the certificates. and it's necessary to load a certificate to firefox.

Searching..

google => firefox certificate let's encrypt update
=> https://www.reddit.com/r/firefox/comments/q0opij/letsencrypt_certificate_fix_in_firefox_48/?tl=ru
I can't find this info.. google -> firefox certificates ca site:os2world.com => NO INFO

[Dariusz Piatkowski]

Eugene!

Happy to try some sites here for you...in OS/2 I am only using FF 45.9, albeit with some of the anti-spam/phishing/etc. addons.

Anyways, post a couple of URLs and let's give it a go!

-Dariusz

[Eugene Gorbunoff]

1) os2.guru => Your connection is not secure

2) wikipedia.org => Your connection is not secure

3) ...

I am using Firefox 45 which I have installed several years ago.
Firefox 45 included to ArcaOS 5.1.2 works fine.

Advanced button =>
SEC_ERROR_UNKNOWN_ISSUER

[Dave Yeo]

https://www.arcanoae.com/wiki/arcaos/post-install-tips-hints/installing-mozilla-application-certificate-updates/

[Eugene Gorbunoff]

AAAAAa.. where did I lost 4 years?! I was confident that this issue was discussed ~ one year ago.

OK! this is what I was searching for. it's necessary inform other users.

[Dariusz Piatkowski]

lol...hey, good news is that you now have this working.

I must have done this on my system a while back (as per Dave's note) b/c both the URLs you listed are fine here.

[Dave Yeo]

I think sometimes the Mozilla apps pick up the certificates installed by the ca-certificates package.

[Lars]

https://www.arcanoae.com/wiki/arcaos/post-install-tips-hints/installing-mozilla-application-certificate-updates/

The funny thing is that the "Let's encrypt" site says that the certificates that the AN article mentions have already expired. That's why I upgraded to those certificates that the "Let's encrpyt" website mentions as being in use.
See: https://letsencrypt.org/certificates/ diagram that says "Let's encrypt Hierarchy as of January 2026"
and that's why I use E7,E8 and R12,R13 instead of E2 and R4 (the later 2 show up under the "retired" list).

I wonder why I never need to update certificates in Windows ...

[Dave Yeo]

Windows has a certificate store where certificates are upgraded by the operating system and Mozilla must pull from that.
I haven't had to upgrade my certificates for a long time and just created a new Firefox profile, went to os2guru and it loaded fine and is using R13, which obviously didn't exist when Firefox was compiled. All I can think of is that Mozilla is pulling the certificates from /@unixroot/etc/pki but I'm far from an expert.