Поиск в Поддержке

Избегайте мошенников, выдающих себя за службу поддержки. Мы никогда не попросим вас позвонить, отправить текстовое сообщение или поделиться личной информацией. Сообщайте о подозрительной активности, используя функцию «Пожаловаться».

Learn More

ssl error in Mobile version of Firefox

  • 9 ответов
  • 2 имеют эту проблему
  • 700 просмотров
  • Последний ответ от do6po

more options

The site Https://parashinta.fi has a valid sert, but mob version of Firefox viewed it with cert error. Why ?

Выбранное решение

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm

This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

Прочитайте этот ответ в контексте 👍 0

Все ответы (9)

more options

What's the exact error?

more options

parashinta.fi uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER

more options

What's needed is the issuer of the problematic cert. You can install this extension to determine the issuer information. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/

Please post that information here.

more options

christ1 said

What's needed is the issuer of the problematic cert. You can install this extension to determine the issuer information. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/ Please post that information here.

Do you mean it?

Country: US Organization: DigiCert Inc Organizational Unit :www.digicert.com Common Name : Thawte TLS RSA CA G1

more options

Sort of, this looks like incomplete information though.

You can check the site yourself at https://www.ssllabs.com . When testing the parashinta.fi domain it says: This server's certificate chain is incomplete. Grade capped to B.

That means in intermediate cert is not sent by the server, and hence Firefox complains about it with the SEC_ERROR_UNKNOWN_ISSUER error.

'DigiCert Global Root G2' is the root CA, and is already trusted by Firefox. The 'Thawte TLS RSA CA G1' is an intermediate CA, and the server does not send that intermediate cert. It only sends it's own cert for 'parashinta.fi'.

You should contact the site owner so that they can fix their configuration.

more options

christ1 said

Sort of, this looks like incomplete information though. You can check the site yourself at https://www.ssllabs.com . When testing the parashinta.fi domain it says: This server's certificate chain is incomplete. Grade capped to B. That means in intermediate cert is not sent by the server, and hence Firefox complains about it with the SEC_ERROR_UNKNOWN_ISSUER error. 'DigiCert Global Root G2' is the root CA, and is already trusted by Firefox. The 'Thawte TLS RSA CA G1' is an intermediate CA, and the server does not send that intermediate cert. It only sends it's own cert for 'parashinta.fi'. You should contact the site owner so that they can fix their configuration.

I do not showed you the all information from the Certificate Viewer. I was tested the site parashinta.fi on different ssl testers(not on https://www.ssllabs.com - they are not for free). They show reslut, and the result are success. Cert is valid. Only Firefox mobile give me the error of ssl cert. I am is a developer on this site. And i must solved this problem for my customer. Thx for your try to help me.

more options

Выбранное решение

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm

This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

more options

kbrosnan said

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

Thank. I tested the certificate on the Digicert website and added the required settings.

more options

Please close the issue.