Compare Revisions
Troubleshoot time-related errors on secure websites
Revision 122375:
Revision 122375 by philipp on
Revision 131356:
Revision 131356 by philipp on
Keywords:
Search results summary:
This article explains why you might see time related errors on HTTPS websites and how you can troubleshoot them by correcting your system clock.
This article explains why you might see time related errors on HTTPS websites and how you can troubleshoot them by correcting your system clock.
Content:
Certificates used by websites which are supposed to be secure (the URL begins with "http'''s'''://") are only issued for a particular timeframe. If a website presents a certificate with a validity period that doesn't fit the current value of your system's clock, you will see a "{for fx44}[[What does "Your connection is not secure" mean?|Your connection is not secure]]{/for}{for not fx44}[["This Connection is Untrusted" error message appears - What to do|This Connection is Untrusted]]{/for}" error message instead. Some methods to validate that a certificate hasn't been revoked also depend on your system and a webserver being set to the right time.
Such issues might be resolved by fixing the date, time and timezone settings on your system or it may be caused by a misconfigured webserver otherwise.
__TOC__
= What kind of time related error codes you might see? =
If you get a "{for fx44}Your connection is not secure{/for}{for not fx44}This Connection is Untrusted{/for}" error page, you can click on {for fx44}{button Advanced}{/for}{for not fx44}{menu Technical Details}{/for} to get more information about the error. One of the following error codes will indicate that the secure connection couldn't be established due to a time related error:
{note}<sub>SEC_ERROR_EXPIRED_CERTIFICATE<br>SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE<br>SEC_ERROR_OCSP_FUTURE_RESPONSE<br>SEC_ERROR_OCSP_OLD_RESPONSE<br>MOZILLA_PKIX_ERROR_NOT_YET_VALID_CERTIFICATE<br>MOZILLA_PKIX_ERROR_NOT_YET_VALID_ISSUER_CERTIFICATE</sub>{/note}
The text in the error message will also show the current date and time of your system. If this appears to be incorrect, you should set it to the right time{for win, mac} as explained below{/for}. Even if the displayed time appears to be correct, you should double-check that the timezone settings of your system fit your current location as well.
= Set your system clock to the correct time =
Time related error messages on secure websites that are caused by a skewed clock on your system can be corrected by setting your current date, time and timezone{for win, mac}:{/for}{for linux}.{/for}
{for win10}
# Click the Windows Start button or press the Windows key {key [[Image:Windows Key]]}.
# In the Start menu, select {menu Settings}.
# In Settings, select {menu Time & language}.
# In the {menu Date & time} section you can review the current date and time settings. To make changes, click on {button Change} below {menu Change date and time} or expand the {menu Time zone} dropdown menu.{note}If your system is set to manage the time and timezone automatically, you cannot make manual changes.{/note}
# If you are done with your changes, close the Settings window again.
{/for}
{for win8}
# From the Start Screen, click the '''Desktop''' tile. The Desktop view will open.
# From the Desktop, hover in the lower right-hand corner to access the Charms.
# Select {menu Control Panel} from the {menu Settings} charm. The Control Panel window will open.
#:[[Image:Control Panel - Win8]]
# In the Control Panel window, click on '''Clock, Language, and Region''' and then '''Date and Time'''.
# The panel that opens shows the current date and time settings. To make changes click on the {button Change date and time} or {button Change time zone} buttons.
# To confirm your changes click on {button OK}.
More information is available in Microsoft's [http://windows.microsoft.com/en-us/windows/set-clock Set the clock] article.
{/for}
{for win7}
# Click the Windows Start button or press the Windows key {key [[Image:Windows Key]]}.
# In the Start Menu, click {menu Control Panel}.
#:[[Image:Control Panel - Win7]]
# In the Control Panel window, click on '''Clock, Language, and Region''' and then '''Date and Time'''.
# The panel that opens shows the current date and time settings. To make changes click on the {button Change date and time} or {button Change time zone} buttons.
# To confirm your changes click on {button OK}.
More information is available in Microsoft's [http://windows.microsoft.com/en-us/windows/set-clock Set the clock] article.
{/for}
{for winxp}
# Click the Windows {button Start} button and select {menu Control Panel}.
#:[[Image:Control Panel - WinXP]]
# In the Control Panel window, click on '''Date, Time, Language, and Regional Options''' and then '''Date and Time'''.
# The panel that opens shows the current date and time settings, which you can adjust.
# In order to review and adjust your timezone settings, click on the '''Time Zone''' tab.
# To confirm your changes click on {button OK}.
More information is available in Microsoft's [https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_date_change_time.mspx To change your computer's time and time zone] article.
{/for}
{for mac}
# Click the Apple menu and select {menu System Preferences}.
# In the System Preferences window, click on '''Date & Time'''.
# The panel that opens shows the current date and time settings. In order to adjust them, disable {pref Set date and time automatically}, manually enter the date and time and click {button Save} to confirm your changes.
# In order to review your timezone settings, click on the '''Time Zone''' tab. In order to adjust your timezone, disable {pref Set time zone automatically using current location}, click onto your approximate location in the map and select the city closest to you in the dropdown panel.
# If you are done with your changes, close the Date & Time window again.
More information is available in Apple's [https://support.apple.com/kb/PH18804 Set the date and time on your Mac] article.
{/for}
{note}If the clock on your device is consistently getting reset after you power it off, this might indicate that the battery cell that runs the real-time-clock has gone empty. Please consult your manufacturer's manual on how to replace the CMOS battery.{/note}
= Contact the website owner =
If you are seeing a time related error message on a secure website and you have already checked that your system's clock is set correctly, you should contact the owner of the website you're having troubles accessing to inform him of that problem. They might need to renew their expired certificate for example.
= Bypassing the warning =
{warning}'''Warning:''' You should never add a certificate exception for a legitimate major website or sites where financial transactions take place – in this case an invalid certificate can be an indication that your connection is compromised by a third party.{/warning}
If the website allows it, you can add an exception in order to visit the site, in spite its certificate is not being trusted by default:
# On the warning page, click {for fx44}{button Advanced}{/for}{for not fx44}{menu I understand the Risks}{/for}.
# Click {button Add Exception…}. The ''Add Security Exception'' dialog will appear.
# Read the text describing the problems with the website. You can click {button View…} in order to closer inspect the untrusted certificate as well.
# Click {button Confirm Security Exception} if you are sure you want to trust the site.
Certificates used by websites which are supposed to be secure (the URL begins with "http'''s'''://") are only issued for a particular timeframe. If a website presents a certificate with a validity period that doesn't fit the current value of your system's clock, you will see a "{for fx44}[[What does "Your connection is not secure" mean?|Your connection is not secure]]{/for}{for not fx44}[["This Connection is Untrusted" error message appears - What to do|This Connection is Untrusted]]{/for}" error message instead. Some methods to validate that a certificate hasn't been revoked also depend on your system and a webserver being set to the right time.
Such issues might be resolved by fixing the date, time and timezone settings on your system or it may be caused by a misconfigured webserver otherwise.
__TOC__
= What kind of time related error codes you might see? =
If you get a "{for fx44}Your connection is not secure{/for}{for not fx44}This Connection is Untrusted{/for}" error page, you can click on {for fx44}{button Advanced}{/for}{for not fx44}{menu Technical Details}{/for} to get more information about the error. One of the following error codes will indicate that the secure connection couldn't be established due to a time related error:
{note}<sub>SEC_ERROR_EXPIRED_CERTIFICATE<br>SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE<br>SEC_ERROR_OCSP_FUTURE_RESPONSE<br>SEC_ERROR_OCSP_OLD_RESPONSE<br>MOZILLA_PKIX_ERROR_NOT_YET_VALID_CERTIFICATE<br>MOZILLA_PKIX_ERROR_NOT_YET_VALID_ISSUER_CERTIFICATE</sub>{/note}
The text in the error message will {for fx49}warn you when Firefox detects that your system time is probably wrong and also {/for}show the date and time currently set in your system. If the clock appears to be incorrect, you should set it to the right time{for win, mac} as explained below{/for}. Even if the displayed time appears to be correct, you should double-check that the timezone settings of your system fit your current location as well.
= Set your system clock to the correct time =
Time related error messages on secure websites that are caused by a skewed clock on your system can be corrected by setting your current date, time and timezone{for win, mac}:{/for}{for linux}.{/for}
{for win10}
# Click the Windows Start button or press the Windows key {key [[Image:Windows Key]]}.
# In the Start menu, select {menu Settings}.
# In Settings, select {menu Time & language}.
# In the {menu Date & time} section you can review the current date and time settings. To make changes, click on {button Change} below {menu Change date and time} or expand the {menu Time zone} dropdown menu.{note}If your system is set to manage the time and timezone automatically, you cannot make manual changes.{/note}
# If you are done with your changes, close the Settings window again.
{/for}
{for win8}
# From the Start Screen, click the '''Desktop''' tile. The Desktop view will open.
# From the Desktop, hover in the lower right-hand corner to access the Charms.
# Select {menu Control Panel} from the {menu Settings} charm. The Control Panel window will open.
#:[[Image:Control Panel - Win8]]
# In the Control Panel window, click on '''Clock, Language, and Region''' and then '''Date and Time'''.
# The panel that opens shows the current date and time settings. To make changes click on the {button Change date and time} or {button Change time zone} buttons.
# To confirm your changes click on {button OK}.
More information is available in Microsoft's [http://windows.microsoft.com/en-us/windows/set-clock Set the clock] article.
{/for}
{for win7}
# Click the Windows Start button or press the Windows key {key [[Image:Windows Key]]}.
# In the Start Menu, click {menu Control Panel}.
#:[[Image:Control Panel - Win7]]
# In the Control Panel window, click on '''Clock, Language, and Region''' and then '''Date and Time'''.
# The panel that opens shows the current date and time settings. To make changes click on the {button Change date and time} or {button Change time zone} buttons.
# To confirm your changes click on {button OK}.
More information is available in Microsoft's [http://windows.microsoft.com/en-us/windows/set-clock Set the clock] article.
{/for}
{for winxp}
# Click the Windows {button Start} button and select {menu Control Panel}.
#:[[Image:Control Panel - WinXP]]
# In the Control Panel window, click on '''Date, Time, Language, and Regional Options''' and then '''Date and Time'''.
# The panel that opens shows the current date and time settings, which you can adjust.
# In order to review and adjust your timezone settings, click on the '''Time Zone''' tab.
# To confirm your changes click on {button OK}.
More information is available in Microsoft's [https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_date_change_time.mspx To change your computer's time and time zone] article.
{/for}
{for mac}
# Click the Apple menu and select {menu System Preferences}.
# In the System Preferences window, click on '''Date & Time'''.
# The panel that opens shows the current date and time settings. In order to adjust them, disable {pref Set date and time automatically}, manually enter the date and time and click {button Save} to confirm your changes.
# In order to review your timezone settings, click on the '''Time Zone''' tab. In order to adjust your timezone, disable {pref Set time zone automatically using current location}, click onto your approximate location in the map and select the city closest to you in the dropdown panel.
# If you are done with your changes, close the Date & Time window again.
More information is available in Apple's [https://support.apple.com/kb/PH18804 Set the date and time on your Mac] article.
{/for}
{note}If the clock on your device is consistently getting reset after you power it off, this might indicate that the battery cell that runs the real-time-clock has gone empty. Please consult your manufacturer's manual on how to replace the CMOS battery.{/note}
= Contact the website owner =
If you are seeing a time related error message on a secure website and you have already checked that your system's clock is set correctly, you should contact the owner of the website you're having troubles accessing to inform him of that problem. They might need to renew their expired certificate for example.
= Bypassing the warning =
{warning}'''Warning:''' You should never add a certificate exception for a legitimate major website or sites where financial transactions take place – in this case an invalid certificate can be an indication that your connection is compromised by a third party.{/warning}
If the website allows it, you can add an exception in order to visit the site, in spite its certificate is not being trusted by default:
# On the warning page, click {for fx44}{button Advanced}{/for}{for not fx44}{menu I understand the Risks}{/for}.
# Click {button Add Exception…}. The ''Add Security Exception'' dialog will appear.
# Read the text describing the problems with the website. You can click {button View…} in order to closer inspect the untrusted certificate as well.
# Click {button Confirm Security Exception} if you are sure you want to trust the site.