A new version of the CERN-CA-certs package is available in the QA environment.
The new package removes the older certificates of the CERN Certification Authority. Please make sure to test your services and software with the new package.
Full details are available on the SSB entry: OTG0077330.

Trust CERN Root Certificate with Mozilla

On Mozilla, the CERN Root certificate is not trusted by default, so CERN Certificates will not be verified correctly and cannot be used to authenticate.

Resolution

The CERN Grid Certification Authority certificates are distributed through the CERN Grid Certification Authority Files and Documents site.

Verify CERN root CA certificate installation

Please note that Firefox doesn't give any confirmation message of the Root CA Certificate installation.

To verify that the installation was completed successfully, you should check the Certificate Manager:

  • From the main menu, select Tools -> Options
  • In the Options dialog, select Advanced -> Encryption -> View Certificates:
  • In the Certificate Manager dialog, select the Authorities tab and verify that the CERN Trusted CA and CERN Root CA certificates are present:

Created: 3/10/2020
Last reviewed: 5/2/2022
Tools:
Send the page Send  |  Printable version Print