X
Tap here to go to the mobile version of the site.

Support Forum

Firefox 60 blocking many sites recuiring security certificates

Posted

Installed latest Firefox on a new win 10 installation and many websites are blocked with security certificate error.... ITV News was one of them along with Facebook, the date and time are right, as well as the year.

The sites work OK 'on this' Win 7 computer with Firefox 46.0.1 - Yes I KNOW it's out of date - it works flawless 'for me' this is not the issue!

Can anything be done? Dave.

Installed latest Firefox on a new win 10 installation and many websites are blocked with security certificate error.... ITV News was one of them along with Facebook, the date and time are right, as well as the year. The sites work OK 'on this' Win 7 computer with Firefox 46.0.1 - Yes I KNOW it's out of date - it works flawless 'for me' this is not the issue! Can anything be done? Dave.

Additional System Details

Installed Plug-ins

  • Shockwave Flash 30.0 r0

Application

  • Firefox 46.0.1
  • User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:46.0) Gecko/20100101 Firefox/46.0
  • Support URL: https://support.mozilla.org/1/firefox/46.0.1/WINNT/en-GB/

Extensions

  • Adblock Plus 2.8.2 ({d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d})
  • Firefox Hello 1.2.6 (loop@mozilla.org)
  • Multi-process staged rollout 1.0 (e10srollout@mozilla.org)
  • Pocket 1.0 (firefox@getpocket.com)
  • Tiny JavaScript Debugger 1.1.7 (tinyjsdebugger@enigmail.net) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: AMD Radeon HD 7540D
  • adapterDescription2:
  • adapterDeviceID: 0x9991
  • adapterDeviceID2:
  • adapterDrivers: aticfx64 aticfx64 aticfx64 aticfx32 aticfx32 aticfx32 atiumd64 atidxx64 atidxx64 atiumdag atidxx32 atidxx32 atiumdva atiumd6a atitmm64
  • adapterDrivers2:
  • adapterRAM: 768
  • adapterRAM2:
  • adapterSubsysID: 00000000
  • adapterSubsysID2:
  • adapterVendorID: 0x1002
  • adapterVendorID2:
  • direct2DEnabled: False
  • direct2DEnabledMessage: [u'']
  • directWriteEnabled: False
  • directWriteVersion: 6.1.7601.17514
  • driverDate: 10-19-2015
  • driverDate2:
  • driverVersion: 15.201.2201.0
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'skia', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'cairo', u'AzureSkiaAccelerated': 0}
  • isGPU2Active: False
  • numAcceleratedWindows: 5
  • numTotalWindows: 5
  • supportsHardwareH264: Yes
  • webglRenderer: Google Inc. -- ANGLE (AMD Radeon HD 7540D Direct3D9Ex vs_3_0 ps_3_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

Misc

  • User JS: No
  • Accessibility: No
FredMcD
  • Top 10 Contributor
4220 solutions 58899 answers

Are they all giving the same error message? Different messages? What is the exact error message(s)?

Are they all giving the same error message? Different messages? What is the exact error message(s)?
cor-el
  • Top 10 Contributor
  • Moderator
17407 solutions 157253 answers

You can check if there is more detail available about the issuer of the certificate.

  • click the "Advanced" button show more detail
  • click the blue SEC_ERROR_UNKNOWN_ISSUER message to show the certificate chain
  • click "Copy text to clipboard" and paste the base64 certificate chain text in a reply

If clicking the SEC_ERROR_UNKNOWN_ISSUER text doesn't provide the certificate chain then try these steps to inspect the certificate.

  • open the Server tab in the Certificate Manager
    • Options/Preferences -> Privacy & Security
      Certificates: View Certificates -> Servers: "Add Exception"
  • paste the URL of the website (https://xxx.xxx) in it's Location field.

Let Firefox retrieve the certificate -> "Get Certificate"

  • click the "View" button and inspect the certificate

You can see detail like the issuer of the certificate and intermediate certificates in the Details tab.

See also:

You can check if there is more detail available about the issuer of the certificate. *click the "Advanced" button show more detail *click the blue SEC_ERROR_UNKNOWN_ISSUER message to show the certificate chain *click "Copy text to clipboard" and paste the base64 certificate chain text in a reply If clicking the SEC_ERROR_UNKNOWN_ISSUER text doesn't provide the certificate chain then try these steps to inspect the certificate. *open the Server tab in the Certificate Manager **Options/Preferences -> Privacy & Security<br>Certificates: View Certificates -> Servers: "Add Exception" *paste the URL of the website (https://xxx.xxx) in it's Location field. Let Firefox retrieve the certificate -> "Get Certificate" *click the "View" button and inspect the certificate You can see detail like the issuer of the certificate and intermediate certificates in the Details tab. See also: *https://support.mozilla.org/en-US/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER

Question owner

Just blocked Sky news-:

Google has just configured their website improperly, to protect your info from being stolen FF has not connected you.

The site uses HTTP Strict Transport Security (HSTS) to specify Firefox can only connect to it securely.... it's not possible to add a certificate.

Report this to help Mozilla.


Edit: Also while tryng to download Libre Office I get-: Mozilla PKIX error not got valid issuer certificate.

Firefox is certainly secure.... I get an error when reporting it to them! Its as for as I got at the moment, Dave

Just blocked Sky news-: Google has just configured their website improperly, to protect your info from being stolen FF has not connected you. The site uses HTTP Strict Transport Security (HSTS) to specify Firefox can only connect to it securely.... it's not possible to add a certificate. Report this to help Mozilla. ---- Edit: Also while tryng to download Libre Office I get-: Mozilla PKIX error not got valid issuer certificate. Firefox is certainly secure.... I get an error when reporting it to them! Its as for as I got at the moment, Dave

Modified by EF80

Question owner

I THINK I've sorted it, time will tell.

On Windows 10 (and any other windows platforms) go to Internet Options simply typing Internet Options in the run bar will get you there, you'll be greeted with a 'Internet properties' window.

Click the far right 'Advance' tab and scroll down to SSL3 tick the box and reboot.... thats it done!

The sites that were blocked wasn't so after doing this.... time will tell.

Thanks for your time and patience, Dave

I'll give a tip..... keep a book near the computer with all the passwords AND log all the changes you make to the machine.

I THINK I've sorted it, time will tell. On Windows 10 (and any other windows platforms) go to Internet Options simply typing Internet Options in the run bar will get you there, you'll be greeted with a 'Internet properties' window. Click the far right 'Advance' tab and scroll down to SSL3 tick the box and reboot.... thats it done! The sites that were blocked wasn't so after doing this.... time will tell. Thanks for your time and patience, Dave I'll give a tip..... keep a book near the computer with all the passwords AND log all the changes you make to the machine.

Modified by EF80