X
Tap here to go to the mobile version of the site.

Support Forum

sec_error_bad_signature only via proxy for https website

Posted

Hello,

I tried to open https website via company proxy but it does not work.

It's only happened with firefox. Chrome & IE is totally fine.

Thanks for instruction.

Khoa.

Hello, I tried to open https website via company proxy but it does not work. It's only happened with firefox. Chrome & IE is totally fine. Thanks for instruction. Khoa.

Chosen solution

I was suggesting to click the Certificate information link, but there is a clue there that you use Zscaler. We had a thread indicating that you can export the certificates from the Windows certificate store (using either IE or Chrome) and then import those into Firefox: https://support.mozilla.org/questions/986876

I'm not sure whether that is documented in detail anywhere, but please note:

  • In the IE or Chrome certificate viewer, click the Zscaler cert you want to export in the Certification Path tab and use the View Certificate button to open it directly.
  • Then click the Details tab and click the Copy to file button. This starts the Export Wizard. Use the DER format and save to a convenient location.

When finished with all the necessary exports to complete the chain in the Certification Path, you can import the certificates into the Firefox Authorities tab:

  • "3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button > Authorities mini-tab > "Import" button
  • I suggest allowing the certificate for websites only unless your IT suggests otherwise

Attaching some screen shots for reference.

Read this answer in context 2

Additional System Details

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36

More Information

Question owner

Screenshot attached

Screenshot attached
jscher2000
  • Top 10 Contributor
8427 solutions 68762 answers

If you visit that site in Chrome or IE and click the padlock icon to view the certificate (in Chrome, click Connection to get to the Certificate information link), what do you see for the Issued by field? I have attached a screen shot for comparison.

If you visit that site in Chrome or IE and click the padlock icon to view the certificate (in Chrome, click Connection to get to the Certificate information link), what do you see for the Issued by field? I have attached a screen shot for comparison.

Question owner

jscher2000 said

If you visit that site in Chrome or IE and click the padlock icon to view the certificate (in Chrome, click Connection to get to the Certificate information link), what do you see for the Issued by field? I have attached a screen shot for comparison.

Hello,

Thanks for prompt response. Attached is screenshot as your requested

''jscher2000 [[#answer-745272|said]]'' <blockquote> If you visit that site in Chrome or IE and click the padlock icon to view the certificate (in Chrome, click Connection to get to the Certificate information link), what do you see for the Issued by field? I have attached a screen shot for comparison. </blockquote> Hello, Thanks for prompt response. Attached is screenshot as your requested

Modified by khoamach

jscher2000
  • Top 10 Contributor
8427 solutions 68762 answers

Chosen Solution

I was suggesting to click the Certificate information link, but there is a clue there that you use Zscaler. We had a thread indicating that you can export the certificates from the Windows certificate store (using either IE or Chrome) and then import those into Firefox: https://support.mozilla.org/questions/986876

I'm not sure whether that is documented in detail anywhere, but please note:

  • In the IE or Chrome certificate viewer, click the Zscaler cert you want to export in the Certification Path tab and use the View Certificate button to open it directly.
  • Then click the Details tab and click the Copy to file button. This starts the Export Wizard. Use the DER format and save to a convenient location.

When finished with all the necessary exports to complete the chain in the Certification Path, you can import the certificates into the Firefox Authorities tab:

  • "3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button > Authorities mini-tab > "Import" button
  • I suggest allowing the certificate for websites only unless your IT suggests otherwise

Attaching some screen shots for reference.

I was suggesting to click the Certificate information link, but there is a clue there that you use Zscaler. We had a thread indicating that you can export the certificates from the Windows certificate store (using either IE or Chrome) and then import those into Firefox: https://support.mozilla.org/questions/986876 I'm not sure whether that is documented in detail anywhere, but please note: * In the IE or Chrome certificate viewer, click the Zscaler cert you want to export in the Certification Path tab and use the View Certificate button to open it directly. * Then click the Details tab and click the Copy to file button. This starts the Export Wizard. Use the DER format and save to a convenient location. When finished with all the necessary exports to complete the chain in the Certification Path, you can import the certificates into the Firefox Authorities tab: * "3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button > Authorities mini-tab > "Import" button * I suggest allowing the certificate for websites only unless your IT suggests otherwise Attaching some screen shots for reference.

Question owner

It works like a charm. Thanks for your support @jscher2000

It works like a charm. Thanks for your support @jscher2000