Showing questions tagged: Show all questions
  • Archived

this connection is untrusted

dear sir, i have watch guard firebox for controlling websites accessing and i have configured deep inspection for HTTPS site. for access these sites i have provide self s… (read more)

dear sir,

i have watch guard firebox for controlling websites accessing and i have configured deep inspection for HTTPS site. for access these sites i have provide self signed CA certificate to internet users. and also i have imported the certificate in trusted root authority of Firefox on the system of internet users.

but when they open HTTPS sites Firefox not use self signed CA certificate and shows these errors (This Connection is Untrusted ).

please help?


regards rahul parmar

Asked by rahulparmar 5 years ago

Last reply by guigs 5 years ago

  • Archived

Latest Firefox update 37.0.2 does not recognize a valid certificate.

The latest update of Firefox, 37.0.2, will no longer work with our ERP system. It tell us: The page you are trying to view cannot be shown because the authenticity of th… (read more)

The latest update of Firefox, 37.0.2, will no longer work with our ERP system. It tell us:

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

But our site does in fact have a valid Go-Daddy certificate. Even though this site is internal and behind our firewall and not visible to the outside world we choose to connect using SSL. Internet Explorer shows the certificate chain and also shows:

This certificate is OK.

I use to like Firefox better than IE but now I think the best course of action is to remove Firefox and never use it again. I do not need to deal with this kind of garbage.

John Nora

Asked by JPNORA 5 years ago

Last reply by FredMcD 5 years ago

  • Archived

Firefox signature algorithm mismatch

Running Firefox 39.0 on Windows 7 and get the following error when attempting to connect to some websites: The signature algorithm in the signature field of the certifica… (read more)

Running Firefox 39.0 on Windows 7 and get the following error when attempting to connect to some websites: The signature algorithm in the signature field of the certificate does not match the algorithm in its signatureAlgorithm field. (Error code: mozilla_pkix_error_signature_algorithm_mismatch) Got this today when trying to connect to Google.com

Asked by ryanhundt 4 years ago

Last reply by guigs 4 years ago

  • Archived

firefox reports "the certificate is not trusted because the issuer certificate is unknown". SSL cert if from RapidSSL (SHA256), IE doesn't bring up any errors?

Hi all, I'm using Firefox 39.0. When I try to connect to our web site, (which has a RapidSSL certificate installed) it shows the errors; "the certificate is not trusted … (read more)

Hi all, I'm using Firefox 39.0. When I try to connect to our web site, (which has a RapidSSL certificate installed) it shows the errors;

 "the certificate is not trusted because the issuer certificate is unknown"
 "the server might not be sending the appropriate intermediate certificates"
 "An additional root certificate may need to be imported"

If I look at the certificate chain I get the information below; Under the issued by, I have

 RapidSSL SHA256 CA - G3
 GeoTrust Inc.
 <Not Part Of Certificate>

When I go to the site with IE, there is no security warning. Any help with this is greatly appreciated.

Asked by spirh52 4 years ago

Last reply by jscher2000 4 years ago

  • Archived

connection not reliable

Questa connessione non è affidabile È stata richiesta a Firefox una connessione sicura con www.google.it, ma non è possibile confermare la sicurezza del collegamento. Nor… (read more)

Questa connessione non è affidabile

È stata richiesta a Firefox una connessione sicura con www.google.it, ma non è possibile confermare la sicurezza del collegamento.

Normalmente, quando si cerca di attivare un collegamento in modalità sicura, il sito web fornisce un’identificazione affidabile per garantire all’utente che sta visitando il sito corretto. Tuttavia l’identità di questo sito non può essere verificata. Che cosa dovrei fare?

Se generalmente è possibile collegarsi a questo sito senza problemi, è possibile che questo errore sia causato dal tentativo da parte di qualcuno di sostituirsi al sito originale. Il consiglio è di non proseguire la navigazione.

Questo sito utilizza il protocollo HSTS (HTTP Strict Transport Security) per garantire che la connessione con Firefox avvenga esclusivamente in modo sicuro. Per questo motivo non è possibile aggiungere un’eccezione per questo certificato.

Asked by marco.maltese-h5k3 4 years ago

Last reply by cor-el 4 years ago

  • Archived

Many secure sites fail to load when behind firewall with IPS.

In our organization we are using a firewall which has an Intrusion Prevention System. The IPS has a certificate which must be imported into the browsers to be able to loa… (read more)

In our organization we are using a firewall which has an Intrusion Prevention System. The IPS has a certificate which must be imported into the browsers to be able to load SSL websites. This allows the IPS to inspect the contents of secure packets for any malware or viruses. The problem is this isn't working very well with Firefox. Most secure sites bring up one of the following errors:

Secure Connection Failed The connection to <website> was interrupted while the page was loading. The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

OR

Secure Connection Failed An error occurred during a connection to <website>. SSL peer rejected a handshake message for unacceptable content. (Error code: ssl_error_illegal_parameter_alert) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

Does anyone have any suggestions on how to get Firefox to work in this environment?

Asked by Chris_00 4 years ago

Last reply by FredMcD 4 years ago

  • Archived

Problem when trying to access facebook. Error code: ssl_error_access_denied_alert

I get this message whenever I try to enter facebook: An error occurred during a connection to www.facebook.com. Peer received a valid certificate, but access was denied. … (read more)

I get this message whenever I try to enter facebook: An error occurred during a connection to www.facebook.com. Peer received a valid certificate, but access was denied. (Error code: ssl_error_access_denied_alert)

I've tried a number of solutions including changing security.tls.version.max to 0.

Anyway to fix this other than formatting the whole drive (which seems a bit exaggerated)?

Asked by Samuel Maclay 4 years ago

Last reply by guigs 4 years ago

  • Archived

Is the URL: ce.lijit.com a legitimate firefox certificate to be installed?

My security carrier says "cannot guanantee authenticity of the domain to which encrypted connection is established. Application: Firefox, URL: ce.lijit.com. Authorizat… (read more)

My security carrier says "cannot guanantee authenticity of the domain to which encrypted connection is established. Application: Firefox, URL: ce.lijit.com. Authorization for this certificate chain was cancelled. Do I allow or disconnect?

Asked by newtothesystem 4 years ago

Last reply by Seburo 4 years ago

  • Archived

I'm tired of not getting to the sites I want to get to

I'm trying to get to https://mail.gmail.com And your program is completely blocking me. I can't even and go add an exception for the server because it says it can't find … (read more)

I'm trying to get to https://mail.gmail.com

And your program is completely blocking me. I can't even and go add an exception for the server because it says it can't find the certificate. I don't care if you can't find the certificate. I guess I'll IE or chrome for this. Unfortunate, Firefox used to be my favorite.

Personally, I much prefer how IE says, I can't validate the certificate, continue (not recommended) or leave the site. Your program only blocks and doesn't give an option to proceed. even with Fiddler installed I can't identify what site it's tryig to get the certificate from. So, your dialog is useless to me.

Also, other secure websites are giving me problems your program.

Asked by nottocd 4 years ago

Last reply by jscher2000 4 years ago

  • Archived

SSL certificate expired -- "I know the risk" is not an option. How do I access the site?

I got the "This Connection is Untrusted" error on a website I use daily. In the past, there have been 2 options at the bottom of the page -- "Get me out of here" and "I … (read more)

I got the "This Connection is Untrusted" error on a website I use daily. In the past, there have been 2 options at the bottom of the page -- "Get me out of here" and "I know the risk". Choosing "I know the risk" lets you access the sight, but it is no longer an option. How do I access sites with expired certificates? I need to work daily with several NYS websites that have expired certificates.

Asked by MEH1 4 years ago

Last reply by Mark Schmidt 4 years ago

  • Archived

You blocked UnitedHealthCare.com, this is a secure site. I need this for my work. I will have to change browsers now.

I am a medical insurance biller. I downloaded Windows 8, and Mozilla Firefox so that I could use United Healthcare Authorizations because they stopped allowing use on Go… (read more)

I am a medical insurance biller. I downloaded Windows 8, and Mozilla Firefox so that I could use United Healthcare Authorizations because they stopped allowing use on Google Chrome. I tried to get on the site, and the message I received was:

"An error occurred during a connection to saml2.radiologynotifications.com. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem."  

When I looked this up, it said that your site said this was a malicious site and blocked it. This is a secure site. And I need this site for my work. I have been doing this for 15 years, and If I cannot use this I will be forced to use another browser.

Can you please help me?

Asked by Mightyhunter 4 years ago

Last reply by jscher2000 4 years ago

  • Archived

Secure Connection Failed after updating to wildcard security certificate

I run ecommerce site, which was using standard ‘Positive SSL’ using the following SSLCipherSuite ALL:!ADH:+HIGH:+MEDIUM:+SSLv2:+EXP. I’ve not had a problem with Firefox u… (read more)

I run ecommerce site, which was using standard ‘Positive SSL’ using the following SSLCipherSuite ALL:!ADH:+HIGH:+MEDIUM:+SSLv2:+EXP.

I’ve not had a problem with Firefox users accessing the site, but today, I removed the Positive SSL cert and replaced it with a ‘Positive Wildcard SSL’

The site is fine with other browsers but when testing on Firefox (no other changes made) I get the following error: --- Secure Connection Failed An error occurred during a connection to www.sussexcookers.com. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the web site owners to inform them of this problem. --- Now I’m obviously the site owner – and I suspect I will be contacted by my users shortly! So I want to address this problem for them. So any help is appreciated!

Now I concluded that – after performing clean install of Firefox on test machine, that the problem is related to SSLCipherSuite, I tried implementing a number of CipherSuites which corrected the problem on test machine, but doesn’t fix the problem for customers who have already visited the site and are returning. The problem is still present on my main development machine and second test machine I use. I’m currently running the following CipherSuite as specified by the Wiki: https://wiki.mozilla.org/Security/Server_Side_TLS ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA

Is this a bug or is there setting I need to change to address this problem. At the moment I fear that anyone who as viewed my site in Firefox prior the certificate change won’t be able to view the site with the new certificate unless they re-install Firefox or rinse the certificate database. Which is not viable steps for my average customer.

Any help or advice would be super appreciated thanks!

Asked by DJGandalf 4 years ago

Last reply by cor-el 4 years ago

  • Archived

Can't watch youtube after system update

Hi, On my both laptops Im using linux and an exactly same vpn setting to access the free world on one of them Im able to open up youtube without any problem using any br… (read more)

Hi,

On my both laptops Im using linux and an exactly same vpn setting to access the free world on one of them Im able to open up youtube without any problem using any browser including FF on the another youtube keeps giving me "An error occurred, Please try agian later"

An error occurred during a connection to r9---sn-o097znel.googlevideo.com.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)


I know the problem is with vpn and ssl certificates! I believe the vpn cant handle the new ssl certificates so its going to refuse them but the weird thing is when I replace the "working-youtube" firefox profile (.mozilla folder) to the "non-working-youtube" profile I can agian watch youtube normaly I can replace the profiles and just start using it but I prefer to keep the current settings because everything else works great

things I have done to get my youtube back again

deleting .mozilla folder [not working] replacing cert8.db [not working] replacing prefs.js [not working]

Asked by kotrebareka 4 years ago

Last reply by cor-el 4 years ago

  • Archived

I have lost my saved passwords after firefox sync with firefox for iOS

After installation of Firefox for iOS I synced it with my default account bws@bws.info and the correct password. After the sync the bookmarks are synced correctly over al… (read more)

After installation of Firefox for iOS I synced it with my default account bws@bws.info and the correct password. After the sync the bookmarks are synced correctly over all devices and all my stored credentials are gone. I need my credentials restored otherwise I will never be able to access a lot of web pages.

Asked by bws 4 years ago

Last reply by rnewman@mozilla.com 4 years ago

  • Archived

I am getting this error sec_error_unknown_issuer

I am getting this error. when i search and content in search bar. and most of the webpages are showing this error sec_error_unknown_issuer. I am totally fed up with this.… (read more)

I am getting this error. when i search and content in search bar. and most of the webpages are showing this error sec_error_unknown_issuer. I am totally fed up with this.

Hope any one can help me to resolve this issue permanently.

Asked by CarterFleming 4 years ago

Last reply by cor-el 4 years ago

  • Archived

"This Connection is Untrusted" ssl_error_bad_cert_domain security.frontier.com

Every day around 9:30 PM, browsing the web becomes impossible. nearly every site I visit brings up a This Connection Is Untrusted page. I have tried using different brows… (read more)

Every day around 9:30 PM, browsing the web becomes impossible. nearly every site I visit brings up a This Connection Is Untrusted page. I have tried using different browsers and Different Devices. Even my 3DS doesn't work. This has lead me to believe that the problem is either with the modem or my service provider. I checked the certificate of Google via chrome://pippki/content/exceptionDialog.xul, and it read ISSUED TO Common Name (CN) security.frontier.com Organization (O) security.frontier.com and when I checked it now, it reads ISSUED TO Common Name (CN) www.google.com Organization (O) Google Inc I don't know what fixes this problem since the problem stops at different times. It started around when I installed AVG, so I tried uninstalling it, but the problem didn't stop. While I'm fairly certain the problem isn't related to Firefox, this is one of the sites that I am able to visit when this problem occurs. I have tried manually adding the exception so I could bypass the Untrusted Connection page, but the page never loads and the next time it happens, the page is there again anyway.

Asked by gemeral 4 years ago

Last reply by jscher2000 4 years ago