An expired certificate on the Mozilla Add-ons infrastructure is disabling Firefox add-ons for millions of users, and is also preventing users from re-activating or (re-)installing extensions.
The issue doesn’t impact all Firefox users, but it impacted enough to trigger a massive surge of complaints on Twitter, Reddit, and other social media sites.
At the time of writing, the issue is still impacting Firefox users. The browser maker has formally acknowledged the issue in an email to ZDNet, on Twitter, in a status page, and in a bug report.
“We’re sorry that there is currently an issue where existing and new add-ons are failing to run or be installed on Firefox,” a Mozilla spokesperson said. “We know what the issue is and are working hard to restore add-on functionality to Firefox as soon as possible.”
“We’ll continue to provide updates via our Twitter channels. Please bear with us while we get the problem fixed,” the browser maker said.
Users of all Firefox versions, old and new, and Stable and Nightly, are impacted. The issue also impacts the Tor Browser, which supports Firefox add-ons.
For Firefox users that are currently impacted by this bug, there is no easy workaround that doesn’t involve them switching to another browser –an operation most users are trying to avoid, as this would require porting all their tabs, history, and add-ons to a new browser, which is a very time-consuming operation.
One possible way to resolve this issue, as recommended by many Firefox users, would be to turn system clocks before May 4, 12:00am UTC (the date at which the Mozilla certificate expired), but this would also break other apps running locally, and which depend on an accurate system clock.
Today’s outage is happening because all Firefox add-ons are digitally signed since the release of Firefox 48, in the summer of 2016.
This mechanism was introduced to fight off malware distributors that were abusing Firefox add-ons; however, it indirectly centralized all add-ons management operations by tying all extensions to Mozilla’s server infrastructure.
More browser coverage:
Credit: Source link