Firefox and sec_error_crl_invalid errors

Posted by NZgeek | Filed under , ,

For a while I've been having problems accessing certain Microsoft sites using Firefox. Whenever I attempt to get to one of these sites, Firefox would show the following error:

Secure Connection Failed
An error occurred during a connection to
New CRL has an invalid format.
(Error code: sec_error_crl_invalid)

I logged a Bugzilla ticket for this issue, and with the help of Nelson Bolyard I very quickly managed to fix the problem.

For some reason, I had managed to import a certificate revocation list (CRL) from Microsoft. There's something in that CRL that Firefox was having problems with, so every time you visit a Microsoft site it causes Firefox to go crazy.

To fix the problem:

  1. In the Firefox menus select Tools > Options...
  2. Go to the Advanced section, and within that go to the Encryption section.
  3. Click the Revocation Lists button to bring up the currently-stored CRLs.
  4. Delete any CRLs where the Organization and Organization Unit columns are empty.
  5. Close the Revocation Lists dialog and click OK on the Options dialog.

This should remove the CRL that's causing the issue, and you can now browse without a problem. If you still have issues, you may need to remove all of the CRLs in the list and see if that helps.

Comments (1) -

May 8, 2009 20:54


Thanks heaps, Ive had this issue for ages as well, could never seem to find a solution till now

Was extremely annoying having to use IETab or opening IE

scoot New Zealand

Comments are closed