Every few days Firefox says all connections not secure
Every few days or so (even if I have rebooted in between) Firefox error says connection is not secure and I cannot access any web page. The error says 'the owner of __________________ has configured their web site improperly .......' Some of the sites: facebook, microsoft, google, mozilla,
I have tried some of the solutions to previous questions: Clearing cache, restarting firefox, starting in safe mode with add ons disabled. I also tried disabling AVG, turning off firewall, resetting wireless adapter and none of those worked either. Once I reboot the PC, then everything is working (even without trying any of the above fixes and with firewall and AVG active) This all of a sudden appears and I'm not always on the same page when it happens.
Όλες οι απαντήσεις (11)
HI let's try this please : uninstall Firefox. Then Delete the Mozilla Firefox Folders in C:\Program Files , C:\Program Files(x86) & C:\ProgramData Then restart system. Then run Windows Disk Cleanup. (Note: This should be Pinned and run Weekly, If never done below expect 10's of gig's) Then run it again and click the button that says Cleanup System Files. Note: your Firefox Profile is saved. But you should make a back up before you do :
- https://support.mozilla.org/en-US/kb/back-and-restore-information-firefox-profiles
- https://support.mozilla.org/en-US/kb/export-firefox-bookmarks-to-backup-or-transfer
Reinstall with Current Release Firefox 59.0.3 with a Full Version Installer
Please let us know if this solved your issue or if need further assistance.
Pkshadow said
HI let's try this please : uninstall Firefox. Then Delete the Mozilla Firefox Folders in C:\Program Files , C:\Program Files(x86) & C:\ProgramData Then restart system. Then run Windows Disk Cleanup. (Note: This should be Pinned and run Weekly, If never done below expect 10's of gig's) Then run it again and click the button that says Cleanup System Files. Note: your Firefox Profile is saved. But you should make a back up before you do : Reinstall with Current Release Firefox 59.0.3 with a Full Version Installer Please let us know if this solved your issue or if need further assistance.
I will try this this afternoon. I should have mentioned this is a new (to me) system and everything has been freshly installed less than two months ago (including the OS fresh clean install on a wiped HD) and Firefox was a fresh install then.
When you see that error page, could you click the "Advanced" button and look for an error code in ALL CAPS, it often starts with SEC_ERROR.
This article discusses the most common of those codes: How to troubleshoot security error codes on secure websites.
If that doesn't point toward a solution, could you click the error code in the page to see whether that opens a panel provided a coded version of the certificate that Firefox doesn't trust? There should be a button to copy the large block of gibberish, and then you can paste it into a reply here.
jscher2000 said
When you see that error page, could you click the "Advanced" button and look for an error code in ALL CAPS, it often starts with SEC_ERROR. This article discusses the most common of those codes: How to troubleshoot security error codes on secure websites. If that doesn't point toward a solution, could you click the error code in the page to see whether that opens a panel provided a coded version of the certificate that Firefox doesn't trust? There should be a button to copy the large block of gibberish, and then you can paste it into a reply here.
I tried all those solutions and it gives no option to view the certificates. Also says cannot add exception. Will have to wait until it happens again before I can try anything more with it --- just happened again right before I posted so that may be 1-3 days or so before it happens again (if the other solution above does not work)
0__0 said
I tried all those solutions and it gives no option to view the certificates. Also says cannot add exception.
True, you cannot add exceptions if a site requires "strict transport security." However, you usually can click the error code to get at the certificate information; sometimes it's not there.
For future reference if the problem recurs:
If you cannot access the coded certificate on a "strict" site you may need to investigate using a different site that is a little less strict with its security. For example:
Do you get the error there?
Assuming so: click the Advanced button, then click the "Add Exception" button (see first screenshot below). We're not really going to add an exception, but we can get a better view of the certificate here.
In the Add Exception dialog, click the "View" button to pop up a certificate viewer. The interesting part is the "Issued by" section. I've marked that on the second screenshot for reference.
On my site, the "Issued by" section shows me "Let's Encrypt Authority X3". What do you see there?
(These example screenshots are from a test page, not my site)
jscher2000 said
0__0 saidI tried all those solutions and it gives no option to view the certificates. Also says cannot add exception.True, you cannot add exceptions if a site requires "strict transport security." However, you usually can click the error code to get at the certificate information; sometimes it's not there.
For future reference if the problem recurs:
If you cannot access the coded certificate on a "strict" site you may need to investigate using a different site that is a little less strict with its security. For example:
Do you get the error there?
Assuming so: click the Advanced button, then click the "Add Exception" button (see first screenshot below). We're not really going to add an exception, but we can get a better view of the certificate here.
In the Add Exception dialog, click the "View" button to pop up a certificate viewer. The interesting part is the "Issued by" section. I've marked that on the second screenshot for reference.
On my site, the "Issued by" section shows me "Let's Encrypt Authority X3". What do you see there?
(These example screenshots are from a test page, not my site)
NO - I click on to report to mozilla and it leads to the error page saying mozilla is an insecure connection. It also states exception cannot be added (screen shots added in OP - will re-attach one on this)
OOPS - that was not the right one --- see the screen shot in this post
But if you click the "Advanced" button next to the blue button, does it open a panel with more error details? If checking that box is breaking how the Advanced button works, please uncheck it.
jscher2000 said
But if you click the "Advanced" button next to the blue button, does it open a panel with more error details? If checking that box is breaking how the Advanced button works, please uncheck it.
I am using firefox now and it is currently working. I did try to uncheck the box and still could not get it to work. I tried all the previous solutions related to this. Next time it breaks, I will take more screen shots --- when it breaks, it happens on ALL sites even the current ones I'm on and signed into. I cannot force it to break it just happens suddenly when I refresh a page or click a link and get the error - and once it breaks, I get the error on all pages.
Just happened again. Took screen shot with it expanded and clicking on 'dvanced' only shows the certificate and gives you the option of copying it to clipboard (below)
https://support.mozilla.org/1/firefox/59.0.3/WINNT/en-US/security-error
Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: true HTTP Public Key Pinning: false
Certificate chain:
BEGIN CERTIFICATE-----
MIIEQjCCAyqgAwIBAgIQPkHS7PiD+UWNtAREk57HhDANBgkqhkiG9w0BAQsFADB7 MTgwNgYDVQQLDC9nZW5lcmF0ZWQgYnkgQVZHIEFudGl2aXJ1cyBmb3IgU1NML1RM UyBzY2FubmluZzEcMBoGA1UECgwTQVZHIFdlYi9NYWlsIFNoaWVsZDEhMB8GA1UE AwwYQVZHIFdlYi9NYWlsIFNoaWVsZCBSb290MB4XDTE3MDkyMDAwMDAwMFoXDTE4 MTAzMTEyMDAwMFowgYYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh MRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRswGQYDVQQKExJNb3ppbGxhIEZvdW5k YXRpb24xDzANBgNVBAsTBldlYk9wczEcMBoGA1UEAxMTc3VwcG9ydC5tb3ppbGxh Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN+VNYhuH3OnHLUs jmXEYdxoW2Qa6Gh4Dv/Es+xT/abV+AeXHLubXvusK4M9ijTi2jZH6r0oBXUZqYhu PZCUFHE11iXyn6EkcJNx0RmrH59HYKAVX2K28ZdUlOedOT5me7Q+ZexjfLI0Eg/a rogshl/EO+drNja1P2P6JbA26XRgZKwn3XJSCx6JDNpnr1YswzDo9Wr42DtjLNkR P5NV8qvWP8VhPjodR8GT/AK4perCm6d0w9ixdFiOEh6vWmNItAYP3ulZSj3EogSH 57wkv0CYc+SdTsiGKjiPRmvcFFvOK6xdv9vzW63unju3jcWjApWcsO3KdUgVL4Pj 4VeVQH8CAwEAAaOBtTCBsjAfBgNVHSMEGDAWgBQEFhQ66ujvdNGkQc4V4DdtZMg9 BzAdBgNVHQ4EFgQUo1wA+KsJqwLnBHhPClXP1xAfVF4wMwYDVR0RBCwwKoITc3Vw cG9ydC5tb3ppbGxhLm9yZ4ITc3VwcG9ydC5tb3ppbGxhLmNvbTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwDQYJKoZIhvcNAQELBQADggEBAMmaG6086//yGQIkwmSPrPB6rI7nfOYwXV94 e5h1RYfibWmKBdEwyz2XbIw+py8wPzsHOVcf2YMFX0741bqiYMIbfJuhR3Fmi3Wi 4mo6N3DByeqOgTVfEMPUuf/noolvOhPsa3rpTEAuRd+vVfBvyW76ze1MVfhNBjFC xymX23ZB4YQ9uib9KnMCamrzgJtUZBET4F2AEGqQIsXi8fvEXXhPD3ax39AP25Mw mfTP7irPG4IQlbecLshYQTDYulddOhqm1Fp/8MHiN0rTlpwnajMwIOZ89WUDE0LU F1Z2nqVHXT47+O8wKAjavuK//1SymejMb931cn616T/dRl7nFmg=
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIID9TCCAt2gAwIBAgIQKnDfD4GeTUOhO3x3+iAZ3zANBgkqhkiG9w0BAQsFADB7 MTgwNgYDVQQLDC9nZW5lcmF0ZWQgYnkgQVZHIEFudGl2aXJ1cyBmb3IgU1NML1RM UyBzY2FubmluZzEcMBoGA1UECgwTQVZHIFdlYi9NYWlsIFNoaWVsZDEhMB8GA1UE AwwYQVZHIFdlYi9NYWlsIFNoaWVsZCBSb290MB4XDTEwMDEwMTEyMDAwMFoXDTQw MDEwMTEyMDAwMFowezE4MDYGA1UECwwvZ2VuZXJhdGVkIGJ5IEFWRyBBbnRpdmly dXMgZm9yIFNTTC9UTFMgc2Nhbm5pbmcxHDAaBgNVBAoME0FWRyBXZWIvTWFpbCBT aGllbGQxITAfBgNVBAMMGEFWRyBXZWIvTWFpbCBTaGllbGQgUm9vdDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANkEu0m3oyElsHylQtbNsrZTPww8A6hq +PC2tAmp5PYIuZw0HpojLkIsi/ok7S/LDKW3tyu4UdpWY6AruXAEEegPT6HYVqRt 1blYne6RMwf/yY2TnMW4Ocx1IhqdZoDOHx5+SGiKNcRxbMabqndUzJJy31iKBUzY Dohrj/BsHvesMtJRB2Nr04N/mDJAFMZlfd0ELX258ZwtHDng8ZDnGQdZjMEaiYxG qaBnL8hBjCAN69DBnzjFL2FuPZmwnSnfgjwNqX6AaXJe0Nz7fYJTzOKiXDvkRJdJ achT+oxp1ndao/m1lGFt9KlMfjl34kLeVbF4DbPdRNjQ3FUvmsuz0L0CAwEAAaN1 MHMwDwYDVR0TBAgwBgEB/wIBADALBgNVHQ8EBAMCAgQwEwYDVR0lBAwwCgYIKwYB BQUHAwEwHQYDVR0OBBYEFAQWFDrq6O900aRBzhXgN21kyD0HMB8GA1UdIwQYMBaA FAQWFDrq6O900aRBzhXgN21kyD0HMA0GCSqGSIb3DQEBCwUAA4IBAQBI1dQg6Fna BoE/BmPDfmaqA5dxDFtuDtD4Zh2Tavm+z70obR7AI1tLg5dHRdYo6pUH/HDk6CZ4 2L90Ttin3cPTWq+RoXjmERKHQRNRPnG1yMRgOoCSD2rN3hOXjCXmALShxB/dVL6o 2Vc7CiK91MqpddJ8v6QRsWH5HdOVeu737n+23me0TwQWo7EiA1rM6as8tXxVBaaj EntrdaqKICxY9SOh9RPRDQreTt9FgLmAb5iPqokmZgg39uyNLKA23+75MBFKj8MS vJpt7Ff8Ucyn41zTldsP6EOPhahxzQqTx93QWZfaSftwXvGSBPlUGj6dQnrLBOdZ mFnsk34zE7V6
END CERTIFICATE-----
Thanks, the coded certificate has this issuer info:
AVG Web/Mail Shield Root
generated by AVG Antivirus for SSL/TLS scanning
Which raises the question, why would Firefox keep losing track of the AVG/Avast signing certificate used to generate the fake site certificates necessary to intercept and filter your browsing? Once Firefox is set up, usually it's stable unless you use the Refresh feature.
More info under Avast in this article: How to troubleshoot security error codes on secure websites