I have a local Rocky Linux server running a nginx web server. I am using a Macos laptop. I am trying to install a self signed ssl certificate using openssl on my web server.. The certificate I generated works with Safari but not with Firefox. I have copied the certificate to both Safari and Firefox for local use. Privacy and Security, Manage Certificates, Your Certificates. Firefox complains that that my TLS is tls 1.1, when I am using tls 1.3:

An error occured during connection to tls-v1-1.badssl.com:1011. Peer using unsupported version of security protocol.

My test on my server shows:

sudo curl -v https://caprock.home

Connected to caprock.home (192.168.2.44) port 443 (#0)

• ALPN, offering h2
• ALPN, offering http/1.1
• CAfile: /etc/pki/tls/certs/ca-bundle.crt
• TLSv1.0 (OUT), TLS header, Certificate Status (22):
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.2 (IN), TLS header, Certificate Status (22):
• TLSv1.3 (IN), TLS handshake, Server hello (2):
• TLSv1.2 (IN), TLS header, Finished (20):
• TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (IN), TLS header, Unknown (23):
• TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
• TLSv1.2 (IN), TLS header, Unknown (23):
• TLSv1.3 (IN), TLS handshake, Certificate (11):
• TLSv1.2 (IN), TLS header, Unknown (23):
• TLSv1.3 (IN), TLS handshake, CERT verify (15):
• TLSv1.2 (IN), TLS header, Unknown (23):
• TLSv1.3 (IN), TLS handshake, Finished (20):
• TLSv1.2 (OUT), TLS header, Finished (20):
• TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (OUT), TLS header, Unknown (23):
• TLSv1.3 (OUT), TLS handshake, Finished (20):
• SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
• ALPN, server accepted to use http/1.1
• Server certificate:
• subject: C=US; ST=Colorado; O=Caprock Development; OU=Caprock Development Home Base; CN=caprock.home; emailAddress=mike@white-home.com
• start date: Aug 12 19:26:04 2025 GMT
• expire date: Nov 13 19:26:04 2032 GMT
• common name: caprock.home (matched)
• issuer: C=US; ST=Colorado; L=Canon City; O=Caprock Development; OU=Caprock Development Home Base; CN=caprock.home; emailAddress=mike@white-home.com
• SSL certificate verify ok.
• TLSv1.2 (OUT), TLS header, Unknown (23):

> GET / HTTP/1.1 > Host: caprock.home > User-Agent: curl/7.76.1 > Accept: */* >

• TLSv1.2 (IN), TLS header, Unknown (23):
• TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
• TLSv1.2 (IN), TLS header, Unknown (23):
• TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
• old SSL session ID is stale, removing
• TLSv1.2 (IN), TLS header, Unknown (23):
• Mark bundle as not supporting multiuse

< HTTP/1.1 200 OK < Server: nginx/1.20.1 < Date: Tue, 28 Apr 2026 13:17:26 GMT < Content-Type: text/html; charset=UTF-8 < Transfer-Encoding: chunked < Connection: keep-alive < X-Powered-By: PHP/8.3.30 <

Caprock.home

• Connection #0 to host caprock.home left intact

Furthermore I can't seem to delete the certificate from Firefox and re add it?

Whenever I try to connect to this sight I get PR_END_OF_FILE error. I am using windows 11. I have looked at numerous suggestions on how to resolve this without success. I am reluctant to create a new profile since I use Firefox on numerous computers.

To be honest. Firefox is starting to be a big pain to use. I'm starting to see more and more of this screen where it say's "Be careful. Something doesn't look right" Even when i go to the advance and say proceed. Nothing happens and i'm getting no where. I know many of the sites don't have anything to do with asking for credit card, Scam or even having popup's. I test the sites in other browsers and there work without any issues. But Firefox is starting to lock me out of many sites due to this. How can i make this stop. As i used Firefox for many years.

The sample that is in the screenshot is a Anime data base that i have also used for years. But today shows this. But was working fine yesteday. What is going on and how can i fix it. So i can start using the browser that i love on the sites i want to.

Just updated Firefox desktop (Win 10 with ESU) to 140.10.0ESR and now every site I try to access gives

Secure Connection Failed An error occurred during a connection to www.google.com. PR_CONNECT_RESET_ERROR Error code: PR_CONNECT_RESET_ERROR The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem.

Sites were all working fine literally right before. No other changes at all. Have restarted a few times. Have disabled antivirus and adblocker extensions. Same problem including at google.com and even firefox. Note on the About Mozilla Firefox window says " Failed to check for updates". Also cannot even use the links there to go to What's new or Firefox help etc. (Gives Secure Connection Failed error). No proxy server. Have tried turning anti virus completely off. Just a combined modem/router -- basically vanilla.

Firefox is my primary browser so this is extremely disruptive. I am using Edge to access sites and post this.. though curiously enough I noticed it gave some error when checking for updates. Do not want to do anything there or will lose complete access.

Any suggestions .. or how to go back to a previous version, if necessary. Need a workable connection to file taxes next week so this is important. Thank you.

Moderator note: This question has been edited to correct the formatting.

I went into firefox security in preferences and deleted some of my certificates and now I can't log into or get on almost all of my old websites...is there a way to restore my original settings???? Thanks

How do you deal with this. Every time I open mail on Yahoo now after Win 10 and Monzilla updates this shows up. Secure Connection Failed

An error occurred during a connection to nearlyfooeyminus.com. SSL received a record that exceeded the maximum permissible length.

Error code: SSL_ERROR_RX_RECORD_TOO_LONG

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

Thanks