{"id":9621,"date":"2019-05-04T10:40:18","date_gmt":"2019-05-04T08:40:18","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=9621"},"modified":"2024-10-03T00:38:44","modified_gmt":"2024-10-02T22:38:44","slug":"firefox-expired-certificate-disables-addons-may-4-2019","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2019\/05\/04\/firefox-expired-certificate-disables-addons-may-4-2019\/","title":{"rendered":"Firefox: Expired certificate disables addons (May 4, 2019)"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline; border-width: 0px;\" title=\"Firefox\" src=\"https:\/\/i.imgur.com\/p5nkKzo.jpg\" alt=\"Mozilla\" width=\"65\" height=\"63\" align=\"left\" border=\"0\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/2019\/05\/04\/firefox-bug-deaktiviert-alle-extensions\/#comment-71241\" target=\"_blank\" rel=\"noopener noreferrer\">German<\/a>]Firefox users are currently suffer from a fat bug. The browser disables since May 4, 2019 suddenly extensions (Addons). Background is an expired certificate. <strong>Update:<\/strong> Mozilla has just released a fix that will be rolled out in the coming hours (see article end).<\/p>\n<p><!--more--><\/p>\n<h2>Error: Addons suddenly no longer usable<\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg04.met.vgwort.de\/na\/f41b57bba91a4164b3da2a62c798c4c3\" alt=\"\" width=\"1\" height=\"1\" \/>German blog reader Guido B. already contacted me this morning by mail and shared his observations (thanks for that):<\/p>\n<blockquote><p>I was badly surprised when I just opened my FF and saw my addons disabled. According to a message from FF my extensions are probably not compatible anymore? ?<\/p>\n<p>FF Version: 66.0.3 (64-Bit)<\/p>\n<p>My installed extensions: uBlock Origin \u2026.<\/p><\/blockquote>\n<p>For some entries there is a message like this::<\/p>\n<blockquote><p>Skip Redirect CANNOT BE INSTALLED AND WAS NOT DEAKTIIVERT<\/p><\/blockquote>\n<p>Guido writes that he uninstall and reinstall Firefox. But that didn't help. If he tries to download and install one of the addons e.g. uBlock Origin now, the message \"Download failed. Please check your connection\" occurs &#8211; see the red bar in the following (German) screenshot.<\/p>\n<p><img decoding=\"async\" title=\"Firefox: Download fehlgeschlagen. Bitte \u00fcberpr\u00fcfen Sie ihre Verbindung\" src=\"https:\/\/i.imgur.com\/kai34xj.jpg\" alt=\"Firefox: Download fehlgeschlagen. Bitte \u00fcberpr\u00fcfen Sie ihre Verbindung\" \/><\/p>\n<p>Also my German blog post <a href=\"https:\/\/web.archive.org\/web\/20231231023925\/https:\/\/www.borncity.com\/blog\/2019\/04\/13\/firefox-66-0-3-freigegeben\/\">Firefox 66.0.3 freigegeben<\/a> got some user comments, reporting this bug (thanks to all for the feedback). On Bleeping Computer <a href=\"https:\/\/www.bleepingcomputer.com\/forums\/t\/697101\/firefox-disabled-addons\/\" target=\"_blank\" rel=\"noopener noreferrer\">this forum post<\/a> deals with the bug &#8211; and in the social network Mewe.com I recognize the message this morning. Here is a screenshot of an addon status page in FF.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" title=\"Disabled addons\" src=\"https:\/\/i.imgur.com\/9W5hDWR.jpg\" alt=\"Disabled addons\" width=\"611\" height=\"460\" \/><br \/>\n(Disabled addons, Source: Bleeping Computer forum)<\/p>\n<p>So something serious must have happened &#8211; and I didn't recognize, that Firefox has been updated this night.<\/p>\n<h2>It's a bug: A certificate is expired<\/h2>\n<p>Some hours ago there was an entry All <a href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1548973\" target=\"_blank\" rel=\"noopener noreferrer\">All extensions disabled due to expiration of intermediate signing cert<\/a> on Bugzilla with a rather banal explanation. A certificate simply expired.<\/p>\n<blockquote><p>Steps to reproduce:<\/p>\n<p>Wait until it's past midnight on 2019-05-04 UTC.<\/p>\n<p>Actual results:<\/p>\n<p>All addons got disabled due not having valid signature.<\/p>\n<p>Expected results:<\/p>\n<p>If the signature was due to expire, it should have been renewed weeks ago. Not all extensions were disabled. Fakespot and Google Scholar Button were left in their disabled state.<\/p>\n<p>Some <a href=\"https:\/\/www.reddit.com\/r\/firefox\/comments\/bk54mu\/addonsextensions_broken\/\" target=\"_blank\" rel=\"noopener noreferrer\">reports on reddit<\/a> <a href=\"https:\/\/www.reddit.com\/r\/firefox\/comments\/bk54mu\/addonsextensions_broken\/\" target=\"_blank\" rel=\"noopener noreferrer\">1<\/a> says that they had their clocks a day forward, but they may be just early canaries for the actual widespread issue.<\/p>\n<p>Going backwards in time allows installation from AMO but do not remove the unsupported mark from the add ons already installed.<\/p><\/blockquote>\n<p>Martin Brinkmann points this out on Ghacks.net (I noticed the post on Mewe.com), and at the same time provides an explanation. All Firefox extensions must be signed since Firefox 48 and Firefox ESR 52. Firefox blocks the installation of extensions with invalid or missing certificates.<\/p>\n<p>Since Mozilla's certificate has expired, this now causes problems in the clients. On reddit.com there is a <a href=\"https:\/\/www.reddit.com\/r\/firefox\/comments\/bkfg00\/also_had_all_my_addons_disabled_and_cant\/\" target=\"_blank\" rel=\"noopener noreferrer\">mega thread<\/a> on the topic. Currently, users can probably do little &#8211; unless they work with Nightly Builds, where the certificate check can be turned off, as Martin Brinkmann writes.<\/p>\n<blockquote><p>I found <a href=\"https:\/\/www.reddit.com\/r\/firefox\/comments\/bk54mu\/addonsextensions_broken\/\" target=\"_blank\" rel=\"noopener noreferrer\">this reddit thread<\/a> where a user suggest to use <em>about:config<\/em> to go to settings an set <em>xpinstall.signatures.required <\/em>to <em>false<\/em>. But my understanding ist, that this only helps in Firefox nightly builds.<\/p><\/blockquote>\n<p>According to <a href=\"https:\/\/www.reddit.com\/r\/firefox\/comments\/bkfte9\/if_you_have_issues_with_your_addons_being_marked\/\" target=\"_blank\" rel=\"noopener noreferrer\">this reddit thread<\/a> all we can do: Wait and be patient. Mozilla's developers are working on a fix.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"de\">\n<p dir=\"ltr\" lang=\"en\">So sorry for the issue we're having with add-ons right now!<\/p>\n<p>We're working hard to fix it and will keep you updated.<\/p>\n<p>\u2014 Firefox (@firefox) <a href=\"https:\/\/twitter.com\/firefox\/status\/1124527050490933248?ref_src=twsrc%5Etfw\">4. Mai 2019<\/a><\/p><\/blockquote>\n<p><span id=\"preserve6a36d51bcf9948ffb52398f232ad4b2f\" class=\"wlWriterPreserve\"><script src=\"https:\/\/platform.twitter.com\/widgets.js\" async=\"\" charset=\"utf-8\"><\/script><\/span><\/p>\n<p>Catalin Cimpanu points out to <a href=\"https:\/\/www.zdnet.com\/article\/firefox-add-ons-disabled-en-masse-after-mozilla-certificate-issue\/\" target=\"_blank\" rel=\"noopener noreferrer\">ZDNet.com<\/a> that this will affect all Firefox users. A short test in my Firefox 66.0.3 portable confirms that I cannot install uBlock Origin.<\/p>\n<h2>Tor also affected &#8211; partly<\/h2>\n<p>Catalin Cimpanu also explicitly names the Tor browser &#8211; but I'd like to differentiate a bit after a test. If I call the Tor browser, the standard addons there will work according to my observations (otherwise I would have noticed that this morning).<\/p>\n<p><img decoding=\"async\" title=\"Tor Addons\" src=\"https:\/\/i.imgur.com\/jeGyG8t.jpg\" alt=\"Tor Addons\" \/><\/p>\n<p>If I try to install a new addon in the Firefox of the Tor bundle, I get this message:<\/p>\n<p><img decoding=\"async\" title=\"Fehler bei Addon-Installation\" src=\"https:\/\/i.imgur.com\/64ws9xj.jpg\" alt=\"Fehler bei Addon-Installation\" \/><\/p>\n<p>Some German users send me comments, that their Tor 8.0.8 'just refused to accept addons in Linux', so we only can be patient and wait. Mozilla has set up <a href=\"https:\/\/discourse.mozilla.org\/t\/certificate-issue-causing-add-ons-to-be-disabled-or-fail-to-install\/39047\" target=\"_blank\" rel=\"noopener noreferrer\">a status page<\/a> \u2013 but I got <em>429 Too Many Requests<\/em>. But I managed to get the page one time displayed. Current status (4.5.2018: 10:15): The Mozilla developers are currently testing a fix, but have deactivated the code signing until the test is successfully completed.<\/p>\n<blockquote><p>A temporary solution has been posted by one of my blog readers <a href=\"https:\/\/www.borncity.com\/blog\/2019\/05\/04\/firefox-bug-deaktiviert-alle-extensions\/#comment-71243\" target=\"_blank\" rel=\"noopener noreferrer\">here<\/a>.<\/p><\/blockquote>\n<h2>Addendum: Mozilla has provided a fix<\/h2>\n<p>Mozilla just announced a fix for the certificate issue that will be automatically distributed to Firefox clients in the next few hours. Here is the tweet.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"de\">\n<p dir=\"ltr\" lang=\"en\">We rolled out a hotfix that re-enables affected add-ons. The fix will be automatically applied in the background within the next few hours.<br \/>\nFor more details, please check out the update at <a href=\"https:\/\/t.co\/G5ypnckjdM\">https:\/\/t.co\/G5ypnckjdM<\/a><\/p>\n<p>\u2014 Mozilla Add-ons (@mozamo) <a href=\"https:\/\/twitter.com\/mozamo\/status\/1124627930301255680?ref_src=twsrc%5Etfw\">4. Mai 2019<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]Firefox users are currently suffer from a fat bug. The browser disables since May 4, 2019 suddenly extensions (Addons). Background is an expired certificate. Update: Mozilla has just released a fix that will be rolled out in the coming hours &hellip; <a href=\"https:\/\/borncity.com\/win\/2019\/05\/04\/firefox-expired-certificate-disables-addons-may-4-2019\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[872,463],"tags":[530,47],"class_list":["post-9621","post","type-post","status-publish","format-standard","hentry","category-browser","category-issue","tag-firefox","tag-issue"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/9621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=9621"}],"version-history":[{"count":1,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/9621\/revisions"}],"predecessor-version":[{"id":35376,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/9621\/revisions\/35376"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=9621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=9621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=9621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}