Firefox Support Forum

Firefox won't open my professor website: https://danielesirangelo.altervista.org/ and there's this error How can i fix this?

Hello,

bellow ca and cert leads to the SEC_ERROR_BAD_DER error in Firefox. In Chrome it works ok. What is wrong?

ca:

MIIGWDCCBECgAwIBAgIUENZtuCf3Tob4s6huBzfC8ZAJkLEwDQYJKoZIhvcNAQEL BQAwUjELMAkGA1UEBhMCUEwxDzANBgNVBAcMBldhcnNhdzEYMBYGA1UECgwPKi5s b2NhbCBkb21haW5zMRgwFgYDVQQDDA8qLmxvY2FsIGRvbWFpbnMwIBcNMjAwOTE1 MTEwODI5WhgPMjEyMDA4MjIxMTA4MjlaMFIxCzAJBgNVBAYTAlBMMQ8wDQYDVQQH DAZXYXJzYXcxGDAWBgNVBAoMDyoubG9jYWwgZG9tYWluczEYMBYGA1UEAwwPKi5s b2NhbCBkb21haW5zMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyM+E 2qiGxytcwOgedhO5O7jQ1j1eYWic1nPbTJPvusCN48mEmwr8SrrfLtRnbKpql/R1 NxQpHLLnY2Yl+6wyfOa/bSickFr1i6MUhIo8E2QgzcxKz8ZhnURen/UHBDhVozIu zmnlEO8xlTJ7Oo8XYRKyA0AcZFKchOcJ5n0dLukWRma/fydZwkWFPqSON4Gph6l7 iINxzLhBwV9QzJqiJ2SoBK5TrpDuTrQ/S5s0lwtzF5bNAz7Unerdj18A00OcINso 7rov9USeKIxHNt2iNZB5QiUkwGqEOuv0D+COv0tBD/fghRYGCLD3kjz2ZlR3r+Ge 6JF/+veM68bUztLE80cjJQG0yTCG5FrkMg05bIZ45OZjIvAMDL/1UJXiANiJFYIv V9ePuXWfKJs//vU31fG44K27dB/IrFwepYVAbTSrPZnGCx9QlXiUpeW0TTBV6IKB AYzSl3t4FYpGFb52mWNlI639hI9GJ8LYnts4dO2U7jxRyQEnTjsF0NJolTyopVEl f2z3FRo3s7K5M8Qshm9mPkJp6wfo39EAQV3tNQnixvZl3lJGSsuK+y8OaAv1Dwvt iH1FWzxnDDKzqR1ZVjyIQlbUMiAzjIC1crGKUlm7Da7gF5x1BdWgyKB5i2+S3VyA r0x1Syi0VbNrW1JQfJRs98VDI96tZ/N8+r4lzeMCAwEAAaOCASIwggEeMB0GA1Ud DgQWBBQjEzbpKy4CdyO+MQ+9ncqhuBPmEjCBjwYDVR0jBIGHMIGEgBQjEzbpKy4C dyO+MQ+9ncqhuBPmEqFWpFQwUjELMAkGA1UEBhMCUEwxDzANBgNVBAcMBldhcnNh dzEYMBYGA1UECgwPKi5sb2NhbCBkb21haW5zMRgwFgYDVQQDDA8qLmxvY2FsIGRv bWFpbnOCFBDWbbgn906G+LOobgc3wvGQCZCxMAwGA1UdEwQFMAMBAf8wCwYDVR0P BAQDAgEGMFAGA1UdHgRJMEegEzAHggVsb2NhbDAIggYubG9jYWyhMDAKhwgAAAAA AAAAADAihyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANBgkqhkiG 9w0BAQsFAAOCAgEAqBaI/6wL7AiaNO0A3/fW6Vs2Pv26GZ5MHCJ7utatgUWMeko6 VeA7ox1mI06Gtio/uZeAkcHWH3Mv8OTel09jPok524GhUCXZPWmy6Fw6UTqjCMZE BJE3DK4alXDyAd/huHu35HeG+yc4JcSjrMeWmXPp70YsfrfAHMFyu/xpsvasYFKR OLPNHvoOXSv2dE94RtrvTYchMb1Hny0T1UEq/9zKhfEyY+gL/49d5lnNc8gFflsN oxwQrJR5+Za2UhCk5eXtjihsHEEx5ATcWYKPWZjpJ1rzfBqy7GKdu6ooB/yItabq Mu9WGSgRDU//TvGgfppU0SdSGjdAfwPaxQMlNXzhdADzCshn+vrn3Dbjm0i1VVL3 ud/0I70SVNqQyBcH6qfieSL6Wzusz8HNKtTo7cTiIfQ9syUwLK+HZSOOaNkBsMvh c5BFUo6KReiea3+WSN912ZrVhXutA5TMhRNCnk2CWHnfJcKn69s1YErN36/OBHyP +Tyddb5wue/z5BF3yDEVJGbN+NLApIFC9GdqoRMmU6TRyIsGjIuWVqHrnZxLLYhs dB7bz3Di356w9E2ICKEy6g9OQHKHuL4MAzy9k3/ATQ6L/6DJsU60xDYNueLSBXaA gQ367qh5CSOq2Gh18Lyo1dNKRqhekhj+PQIIZrx7k9UhJGa4EEmFLNnOZ60=

cert:

MIIEOTCCAiGgAwIBAgIUFh/RK2IbfX8WuyuicSyTbnys14owDQYJKoZIhvcNAQEL BQAwUjELMAkGA1UEBhMCUEwxDzANBgNVBAcMBldhcnNhdzEYMBYGA1UECgwPKi5s b2NhbCBkb21haW5zMRgwFgYDVQQDDA8qLmxvY2FsIGRvbWFpbnMwIBcNMjAwOTE1 MTEyMDEyWhgPMjEyMDA4MjIxMTIwMTJaMB8xCzAJBgNVBAYTAlBMMRAwDgYDVQQD DAcqLmxvY2FsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERKh7lH TqrCC395M7gSoNAoXrM2TQ7xmBShuoeypCQaPHnufD40+3CxVWOUznC4k+OchDni TUcRJq6Zck3uRC5cC7H7vP6ULiwk5lTWZwKwmW8BTt/Qu+FnXBG+PLUF24s0Cqv4 wUOubU+/DamdwoufmYGjNxreddcJu8oCMuwJKGv3WTGmCsYHWmebrKE/ayw/MlWi 5oB8XrxpeZlD+po4H0rv1s2f1m4nXbEGjq3Wxdwh2dbwEQEMUjGNc+lRGS3evBo8 SF6+Ot8Wzfa/NYGlUcA3jYVHl9gMG398pGikrmTecXh5w0VOKJ4qSMhgzMqIH5WR DfT6VSG6AwZDqQIDAQABozgwNjALBgNVHQ8EBAMCBeAwEwYDVR0lBAwwCgYIKwYB BQUHAwEwEgYDVR0RBAswCYIHKi5sb2NhbDANBgkqhkiG9w0BAQsFAAOCAgEAtClj BoRiitzzzr0H7hZGI4RWa17L9ou1cmwBC10fdrgOPON9Kwsh632t82/EGfHmRR3D KCVke12Qd7jTchGna03JU+0zuc+5WN5LuBc/1R0iYWVwHmYWQtkLuBaWEvOvsH4N 8Og37Gn0nI8UBCZd8V9MgIIhsAJ0pk8vNi0bv5TnZk5n+IZtpWTQZVZj3F/8tAN3 ZNwkec8RjLCKsXygwadKNxkuxMrecqIKrOsE+mxpHuxciEoQHIrlYmwS7fdUYdtk vzS7UrKopNj1uAMAd31XDeEs1aXsJDnF3mk3sdKyx7/Alv01GA9FCCQJpa+naOtP e6rxcoDk1ffGDUIKr1QJgVrKUco4jrwmYLMOSjEOwzDH1zcmMeOs97OP2qKZE9BI i3nPQno907odphdRz0NA3mGy70mz6pTnsYOPW/9QFL25A8dsD10OPSrGjmKkSyv0 rRnJCx5uYXuz5Yw2fO097n1z7jEGu9Ve27pvifG2pgT4PA1a3lWFDDlABo+cyDVB +OSvIWvr0YZpfQYam069AF2vtyqdw8FWHTlV9zH/6r3gXk9VrLBrzNWMCnUJwK7h Y8mnUwc9nVtWqwNxIS9oda4R7DImhEmNK3xz2lEpHIWVisd8p+TuTVHL2D22WzPX 76MD6hy8iNxOTr00+c+NcDzrqjH4FftkvEEg35g=

Secure Connection Failed

An error occurred during a connection to www.google.com. Peer’s certificate has an invalid signature.

Error code: SEC_ERROR_BAD_SIGNATURE

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

After a successful 2-way TLS handshake, I was able to browse my website for 1-2 times, subsequent requests failed with the "Secure Connection Failed" message and there is no error code to understand what the error is. In Network tab, it showed that Firefox didn't send the request to the web server (request_not_make_to_webserver.png). In Console tab, there was a message of "This error page has no error code in its security info" (console_show_no_error_code_msg.png). There is no issue to connect to my website using Chrome.

Did anyone face this issue before? What could be the cause for such problem?

Thanks, Tuan

I keep getting SECURE CONNECTION FAILED trying to sign in to my Gmail Email account. It was fine yesterday. Everything else (websites etc) I can accesson Firefox Browser.

HOW CAN I SORT THIS?

I am running a 2008 Imac on OS 10.11.6, and using Firefox 77.0.1 (64 bit).

Much of my work is online with one website, which I log onto daily. Today, I was unable to login because I received a "Did Not Connect. Potential Security Issue." I restarted, made sure Firefox was up to date, etc. The problem repeated.

Then I tried the website in Chrome. I got the same thing. I tried it in Safari. I got the same thing.

I called the company and spoke with tech support. He was unable to recreate my problem on his PC or his Mac. He confirmed that there was no certificate issue at the company and that they were not getting any other similar complaints or problems.

I then tried it on a Mac running 10.15, and was able to access the website easily, with no error messages.

My question is: is the problem my computer, and not the browsers or connections? Is there anything I can do short of buying a new computer?

Thanks for the help. Greg

hi. can anybody explain me the message SEC_ERROR_UNKNOWN_ISSUER when i use connection inside my company

when i add site to exclusion does firefox continue to protect my connection to site by using TLS or firefox stop use TLS and passwords transmit openly?

it is important to understand to me have i install a valid certificate on all my equipment to protect my connection inside the company.

or just add site to exclusion , because i know that certificate have been generated randomly and my connection and passwords to equipment is still by protection TLS.

On saturday our global sertificate expired and we renewed it a bit late. Now Firefox users cant visit our site, seeing this error message.

   Secure Connection Failed. 
   Please contact the server administrator or email correspondent and give them the following information: Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number.
   
   Error code: SEC_ERROR_REUSED_ISSUER_AND_SERIAL 
   
   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. 
   Please contact the website owners to inform them of this problem.

Unfortunately the only way to fix it we found is deleting the whole profile, deleting the sertificates themselves does not work for us. It is very difficult for our users to do it. Can you please help us with this problem?

A webpage on our internal company domain ("") errors out with "Error SSL_ERROR_RX_RECORD_TOO_LONG". If I switch to private browsing the same page works. The page also works with all other browsers without issue. If I "reset firefox", the page starts working again - even after firefox sync has re-installed all my add-ons. After some indeterminate amount of time (weeks) the page starts to error out again. This problem occurs on Firefox 75 on Ubuntu 18.04 as of now.

I'm at a total loss as to how to even begin to debug this - any pointers on where to start looking? As I mentioned the webpage that errors out the only page on an intranet so I cannot share the URL.

Hi there,

We have a weird problem with firefox only (not this problem with other web browser like Chrome, Ie or Edge). The problem is that we cannot browse this website at the same time. No problem to browse one website, but going on the seconde one and you will get on 404 error.

Not Found ________________________________________ HTTP Error 404. The requested resource is not found.

Same error for 3 others.

Just waiting few minutes (at least 5min), refresh the second website, it’s working coming back on the first tab (with the first website), refresh and you get the error 404.

This problem occurs only when we are using IPV6 connexion on an HTTPS websites (only on some of ours web sites (https://www.ticpharma.com/home.php, https://www.techopital.com/ https://www.gerontonews.com, https://www.ticsante.com/home.php and https://www.apminternational.fr/). These 5 website sharing the same SSL certificats. It’s a multi domain SSL certificats provide by Gandi.net.

No problem when we use the Firefox PRIVATE windows. No problem when we browse theses websites in http and IPV6. No problem when we browse theses websites in httpS and IPV4. No problem with other browser in httpS and IPV6.

So only problem with Firefox, in IPV6 and HPPS. This problem occurs on multiple computers, with diffrent Anti-Virus, from different location, for different network and ISP provider. So I guess there is a bug somewhere in firefox.

Thanks for your help. Regards.

Hello, whenever I change the date on my PC ( which I do several times per week for experiments), all my addons get disabled, as the browser decides they are unsigned (as visible in the screenshot)

And there is no way to re-enable them - I have to search for them again, go to the download site, and download them again. Yet the browser knows perfectly well that the date is wrong - so it should not be very hard to stop him from disabling addons during a period of wrong date.

Furthermore - there should be an option to re-check the validity of (all) addons which were disabled with 1 click, without having to re-download them.

This is the message that I receive when I click on the Firefox icon:

Secure Connection Failed

An error occurred during a connection to home.packagesear.ch. SSL received a record that exceeded the maximum permissible length.

Error code: SSL_ERROR_RX_RECORD_TOO_LONG

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

When I access my own development website by domain name (with SSL signed by Digicert), it's fine, I see the lock symbol in FF. When I access it by typing https://[IP address]:443 , I get the "not secure" warning. The IP address has a valid reverse DNS that points to the domain name, which in turn has the valid SSL cert. The domain's A Record also points back to the same IP address. I'm curious why does Firefox do this, and is there anything I can do in my DNS settings to remove the warning for other users -- without changing FF settings? Thanks.

When a user, on a MacOS Catalina, sets the security.enterprise_roots.enabled to true in Firefox, the certificates are not read from MacOS keychain store.

The method used to set the parameter to true:

Use Firefox on MacOS Catalina, type 'about:config' in the address bar. If prompted, accept any warnings. Right-click to create a new boolean value, and enter 'security.enterprise_roots.enabled' as the Name Set the value to 'true'

What is your recommendation to bypass this problem without manually importing the certificates in the FF certificates authorities ? The goal is to read the certificates from the system store. This parameter works perfectly on MacOS Mojave & Windows.

On a particular website, I click the lock in the address bar to see if the connection is secure. It is reported secure, see first image, it also says which CA verified the certificate. All seems well but if I click on more information, i get what is shown on the second image, firefox suddenly reports that the site is not encrypted. The website runs on IIS. This happens with both internal CA issued certificate (the ca is imported into firefox as trustworthy root) as well as with letsencrypt issued certificate. Neither internet explorer nor chrome find any anomalies and report the site as trustworthy and all certificates in order. Why is this happening and what is the cause? (i have another server at the same site running also IIS with exchange where the certificate shows correctly in firefox)

I access one TLS URL that's secured by user certificate. I had no problem importing the .p12 certificate into my profile's user certificate store ("Your Certificates"), and I could access the URL.

On the TLS URL system, for an unrelated reason, I had to generate a new certificate. My task was to remove the user certificate from my profile's certificate store, and replace with the new certificate.

The replacement was perfect: Delete the old certificate, import the new certificate. Enter the cert password, and see the new certificate, with its new serial ID listed in Firefox's certificate store.

When I try to visit the TLS secured URL, Firefox gives "Secure Connection Failed" and "SEC_ERROR_BAD_SIGNATURE". It says "Peer has an invalid signature."

I'm at a loss how to proceed troubleshooting this.