Hello all,
I currently have problems with Active Directory Certificate Services issued SSL certificates and compatibility with Firefox (newest).
Environment: PKI has been deployed in two tier architecture, root CA and Enterprise Issuing CA. Both Servers are Windows 2008 R2, Issuing is Enterprise edition, Root Standard edition. Problem exist with the Firefox and issued certificates, when trying to open protected page with this certificate I get:
Message: Error code: sec_error_bad_signature
Certificate looks like this:
Version: V3
Signature Algorithm: RSASSA-PSS
Signature Has Algorithm: SHA1
Root CA is trusted and installed on each machine keystore. Problem only affects Firefox, I suspect the problem is the FF keystore, because for Chrome and IE everything works.
Maybe you have the same expierence with FF compatibility issues.
Thanks in advance!
J