Old certification not removed during install : error SEC_ERROR_REUSED_ISSUER_AND_SERIAL

[shodanx2]

Describe the Bug

Trying the latest release, it seems the serial number on the certification has changed.
This freaks out Firefox and leaves no way to bypass.

Annoyingly, I don't even know the name of the certification to delete ?
Could you add replacement of old certifications in the install.bat ?

thanks !

Error text

Secure Connection Failed

An error occurred during a connection to localhost:47990. You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.

Error code: SEC_ERROR_REUSED_ISSUER_AND_SERIAL

Expected Behavior

Software should ensure correct certifications are installed / superseded certifications are removed

Additional Context

No response

Sunshine Host Operating System and Version

Windows 10

Architecture

x64

Sunshine Version

0.13

GPU Type

nvidia

GPU Model

1080 ti

GPU Driver/Mesa Version

497.29

Capture Method (Linux Only)

No response

[gnoumph]

Hello,

This is not a Windows 10 related issue, got the same on Kubuntu 21.10 (5.13.0-39-generic) with Firefox 98.0.2 x64.

EDIT : as a workaround, you can reset your certificates. Go to Help > Troubleshooting Information > Profile Directory: Open Containing Folder, close Firefox, then rename cert9.db to something like cert9.db.bak.
Reopen Firefox, you should be able to access Sunshine UI.

https://support.mozilla.org/fr/questions/878694

[ReenigneArcher]

This is a duplicate of loki-47-6F-64/sunshine#266 which has already has a solution, so closing this now.

I will post the solution here as well for anyone who finds this in the future. Original solution is here: loki-47-6F-64/sunshine#266 (comment)

I solved this same issue without completely resetting firefox.

1. Open about:profiles in the address bar
2. Then click open on the profile of interest
3. Close Firefox
4. Delete or rename cert9.db and/or cert8.db
5. Open Firefox and navigate to https://localhost:47990

As far as I can tell this is a symptom of deleting the "credentials" folder in sunshine.

[stenwt]

This is a 14-year old UI problem in FF that they refuse to fix: https://bugzilla.mozilla.org/show_bug.cgi?id=435013

Any chance we could get a toggle to disable TLS on the web ui? Dealing with this is a PITA.

[cromefire]

I mean it would be as easy a just using a random serial number to generate a new certificate. Firefox is completely right that an issuer may not reuse a serial number.
I'm not involved in C++ & OpenSSL, but just setting a random serial number somewhere around this line would probably permanently properly fix this issue:

Sunshine/src/crypto.cpp

Line 446 in 08d623c

X509_set_issuer_name(x509.get(), name);

Here's the serial number API: https://www.openssl.org/docs/man3.0/man3/X509_set_serialNumber.html

[LizardByte-bot]

This issue has been fixed and will be available in the next release.