X
Nhấn vào đây để đến phiên bản di động của trang web.

Diễn đàn trợ giúp

Firefox will no longer open Google without a "This Connection is Untrusted" error, and no option to get a temporary certificate is available.

Được đăng

This problem popped up for the first time a few months ago. but I was able to work around it by by clicking on "I understand the risks" on the "This Connection Is Untrusted" warning page, and then by adding a security exception. That fix would work for random lengths of time... sometimes for days, sometimes for minutes. Now, after updating to the latest version of Firefox, I get the same security warning but the option to click "I Understand the Risks" is gone. I get this error message on the technical details page: (Error code: sec_error_unknown_issuer

I have done everything listed here many, many times: https://support.mozilla.org/en-US/kb/connection-untrusted-error-message I mean everything. Delete cert.db, start in safe mode, empty cache, delete and reinstall.... Nothing works.

Your help would be greatly appreciated!

This problem popped up for the first time a few months ago. but I was able to work around it by by clicking on "I understand the risks" on the "This Connection Is Untrusted" warning page, and then by adding a security exception. That fix would work for random lengths of time... sometimes for days, sometimes for minutes. Now, after updating to the latest version of Firefox, I get the same security warning but the option to click "I Understand the Risks" is gone. I get this error message on the technical details page: (Error code: sec_error_unknown_issuer I have done everything listed here many, many times: https://support.mozilla.org/en-US/kb/connection-untrusted-error-message I mean everything. Delete cert.db, start in safe mode, empty cache, delete and reinstall.... Nothing works. Your help would be greatly appreciated!

Giải pháp được chọn

In Firefox, you need to import into Authorities. The certificate usually will have a .cer extension.

Đọc câu trả lời này trong ngữ cảnh 4

Chi tiết hệ thống bổ sung

Phần bổ trợ đã cài đặt

  • Adobe PDF Plug-In For Firefox and Netscape 15.7.20033
  • GEPlugin
  • Google Update
  • Inte IPT Web API
  • Intel WebAPI Updater - Installs and updates Intel WebAPIs
  • The plugin allows you to have a better experience with Microsoft Lync
  • The plugin allows you to have a better experience with Microsoft SharePoint
  • Picasa plugin
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Shockwave Flash 18.0 r0
  • 5.1.40416.0
  • VLC media player Web Plugin
  • NPWLPG
  • iTunes Detector Plug-in

Ứng dụng

  • Firefox 39.0
  • Chuỗi đại diện người dùng: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
  • URL hỗ trợ: https://support.mozilla.org/1/firefox/39.0/WINNT/en-US/

Tiện ích mở rộng

  • Adblock Plus 2.6.9.1-signed ({d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d})
  • McAfee ScriptScan for Firefox 15.3.0 ({D19CA586-DD6C-4a0a-96F8-14644F340D60}) (không hoạt động)

Javascript

  • incrementalGCEnabled: True

Đồ họa

  • adapterDescription: Intel(R) HD Graphics Family
  • adapterDescription2:
  • adapterDeviceID: 0x0102
  • adapterDeviceID2:
  • adapterDrivers: igdumd64 igd10umd64 igd10umd64 igdumdx32 igd10umd32 igd10umd32
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterSubsysID: 047e1028
  • adapterSubsysID2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 6.2.9200.17292
  • driverDate: 6-10-2011
  • driverDate2:
  • driverVersion: 8.15.10.2418
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'direct2d 1.1', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'direct2d 1.1', u'AzureSkiaAccelerated': 0}
  • isGPU2Active: False
  • numAcceleratedWindows: 2
  • numTotalWindows: 2
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) HD Graphics Family Direct3D9Ex vs_3_0 ps_3_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Thay đổi cài đặt

Linh tinh

  • Người dùng JS: Không
  • Có thể tiếp cận: Không
philipp
  • Top 25 Contributor
  • Moderator
5320 giải pháp 23501 câu trả lời
Được đăng

hi spwood, in order to know what's going on we probably need more information about the failing issuer of the certificate. please proceed like this: enter chrome://pippki/content/exceptionDialog.xul into the location bar, and in the page that opens, set the server location to "https://www.google.com" in order to retrieve and view the certificate. then please report back with the data of the issued by section of the certificate viewer. thank you!

hi spwood, in order to know what's going on we probably need more information about the failing issuer of the certificate. please proceed like this: enter '''chrome://pippki/content/exceptionDialog.xul''' into the location bar, and in the page that opens, set the server location to "https://www.google.com" in order to retrieve and view the certificate. then please report back with the data of the''' issued by''' section of the certificate viewer. thank you!

Người tạo câu hỏi

Philipp:

Thanks so very much for your reply. I have followed the steps you outlined above.. Attached is an image of the certificate that I received.

Please let me know what I should do next.

Thanks.

Philipp: Thanks so very much for your reply. I have followed the steps you outlined above.. Attached is an image of the certificate that I received. Please let me know what I should do next. Thanks.
philipp
  • Top 25 Contributor
  • Moderator
5320 giải pháp 23501 câu trả lời
Được đăng

thanks for following up. does it make a difference if you check in the firefox menu ≡ > options > advanced > network > connection - settings... if firefox is set up to directly connect to the internet ('no proxy')?

thanks for following up. does it make a difference if you check in the firefox ''menu ≡ > options > advanced > network > connection - settings...'' if firefox is set up to directly connect to the internet ('no proxy')?

Người tạo câu hỏi

Firefox will not connect to the Internet through my network unless I select the "use system proxy settings" option. Sorry.

Firefox will not connect to the Internet through my network unless I select the "use system proxy settings" option. Sorry.
philipp
  • Top 25 Contributor
  • Moderator
5320 giải pháp 23501 câu trả lời
Được đăng

what is happening here is that in the network environment you're on your encrypted network traffic is intercepted/monitored by this proxy setup. if this isn't properly set-up it looks like a genuine man-in-the-middle attack for firefox and that's why it is displaying that error message.

does it work in other browsers like IE or chrome? if so you could try to import the proxy.state.de.us root certificate from those browsers into firefox, like jscher2000 has described it here (for a different certificate): https://support.mozilla.org/en-US/questions/1068675#answer-745280

otherwise you'd probably ave to contact your it department and inquire about the proper setup/instructions of getting this to work...

what is happening here is that in the network environment you're on your encrypted network traffic is intercepted/monitored by this proxy setup. if this isn't properly set-up it looks like a genuine man-in-the-middle attack for firefox and that's why it is displaying that error message. does it work in other browsers like IE or chrome? if so you could try to import the proxy.state.de.us root certificate from those browsers into firefox, like jscher2000 has described it here (for a different certificate): https://support.mozilla.org/en-US/questions/1068675#answer-745280 otherwise you'd probably ave to contact your it department and inquire about the proper setup/instructions of getting this to work...

Người tạo câu hỏi

Yes, Google works fine in IE. I have tried importing the root certificates issued by my proxy server into Firefox, but to no effect.

If my network or proxy are the problem, why does IE work but not Firefox. Doesn't that suggest that the issue is within Firefox somewhere?

Yes, Google works fine in IE. I have tried importing the root certificates issued by my proxy server into Firefox, but to no effect. If my network or proxy are the problem, why does IE work but not Firefox. Doesn't that suggest that the issue is within Firefox somewhere?

Người tạo câu hỏi

Would you be so kind as to advise why IE works with my proxy but Firefox won't?

Would you be so kind as to advise why IE works with my proxy but Firefox won't?
philipp
  • Top 25 Contributor
  • Moderator
5320 giải pháp 23501 câu trả lời
Được đăng

firefox has a different certificate store than IE. if there is one entity that should be allowed to intercept/monitor all secure network traffic, its certificate has to be whitelisted in the browser's certificate store - apparently this is set-up in IE in your case but not in firefox...

firefox has a different certificate store than IE. if there is one entity that should be allowed to intercept/monitor all secure network traffic, its certificate has to be whitelisted in the browser's certificate store - apparently this is set-up in IE in your case but not in firefox...

Người tạo câu hỏi

So, how do I whitelist the certificate for GOogle in Firefox?

So, how do I whitelist the certificate for GOogle in Firefox?
philipp
  • Top 25 Contributor
  • Moderator
5320 giải pháp 23501 câu trả lời
Được đăng

you don't have to whitlist the certificate for google (this will work out of the box) but the one by "proxy.state.us" - that's why i've suggested contacting your it department about this issue because there isn't much public information available about that

you don't have to whitlist the certificate for google (this will work out of the box) but the one by "proxy.state.us" - that's why i've suggested contacting your it department about this issue because there isn't much public information available about that
jscher2000
  • Top 10 Contributor
8785 giải pháp 71850 câu trả lời
Được đăng

spwood said

I have tried importing the root certificates issued by my proxy server into Firefox, but to no effect.

Make sure to remove old "exceptions" you might have saved before. Just to confirm:

  • Server exceptions appear here: "3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button, then Servers tab -- look for ones that list a specific server, not "*"
  • Your proxy server's authority certificate was imported here: "3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button, then Authorities tab
''spwood [[#answer-751271|said]]'' <blockquote> I have tried importing the root certificates issued by my proxy server into Firefox, but to no effect. </blockquote> Make sure to remove old "exceptions" you might have saved before. Just to confirm: * Server exceptions appear here: "3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button, then '''Servers''' tab -- look for ones that list a specific server, not "*" * Your proxy server's authority certificate was imported here: "3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button, then '''Authorities''' tab

Người tạo câu hỏi

Oh boy... after doing the above things are getting worse! Google still doesn't work, and now Yahoo search won't either - same error as with Google. Perhaps I need a bigger hammer :( Any other thoughts?

Oh boy... after doing the above things are getting worse! Google still doesn't work, and now Yahoo search won't either - same error as with Google. Perhaps I need a bigger hammer :( Any other thoughts?
jscher2000
  • Top 10 Contributor
8785 giải pháp 71850 câu trả lời
Được đăng

Can you find your proxy's certificate on the Authorities tab? If not, try importing it again. Without that in place, Firefox won't trust any of the fake site certificates signed by the proxy.

Can you find your proxy's certificate on the Authorities tab? If not, try importing it again. Without that in place, Firefox won't trust any of the fake site certificates signed by the proxy.

Câu trả lời hữu ích

Thanks for your continued help.

I have located the proxy's certificate under IE's "Intermediate Cerfication Authorities. Into which category of certificates under Firefox should it be imported? "Servers" or "Authorities"

Thanks for your continued help. I have located the proxy's certificate under IE's "Intermediate Cerfication Authorities. Into which category of certificates under Firefox should it be imported? "Servers" or "Authorities"
jscher2000
  • Top 10 Contributor
8785 giải pháp 71850 câu trả lời
Được đăng

Giải pháp được chọn

In Firefox, you need to import into Authorities. The certificate usually will have a .cer extension.

In Firefox, you need to import into Authorities. The certificate usually will have a .cer extension.

Người tạo câu hỏi

You, sir, are a genius!

I have applied the fix suggested above, and both Google and Yahoo have been restored to full functionality.

Thanks so very much for your assistance! Bravo!

You, sir, are a genius! I have applied the fix suggested above, and both Google and Yahoo have been restored to full functionality. Thanks so very much for your assistance! Bravo!
rickthomas 1 giải pháp 6 câu trả lời
Được đăng

Câu trả lời hữu ích

I cannot follow the fix described above. Can you describe in English the steps I should perform in order to get the google and yahoo fixes described? Thanks.

I cannot follow the fix described above. Can you describe in English the steps I should perform in order to get the google and yahoo fixes described? Thanks.
jscher2000
  • Top 10 Contributor
8785 giải pháp 71850 câu trả lời
Được đăng

Hi rickthomas, was your other problem of no profile solved?

This thread relates to security software that filters your secure browsing, such as Avast, Bitdefender, ESET or Kaspersky. If Firefox is not set up to work with these programs, you get secure connection error pages containing this:

Error code: sec_error_unknown_issuer

Is that what you're getting? If so, which security software do you use?

Hi rickthomas, was your other problem of no profile solved? This thread relates to security software that filters your secure browsing, such as Avast, Bitdefender, ESET or Kaspersky. If Firefox is not set up to work with these programs, you get secure connection error pages containing this: Error code: sec_error_unknown_issuer Is that what you're getting? If so, which security software do you use?
rickthomas 1 giải pháp 6 câu trả lời
Được đăng

Thanks jscher2000.

The profile problem is not fixed (I am using a second computer with FF version 39.0.3 loaded). I've given up for now on using FF (any version) on the first computer.

Regarding the untrusted sites, I use Kaspersky, and have not gotten beyond the FF error page for untrusted sites. So I'm not sure what error code I've gotten. The previous FF version (39.0.3) does not have these issues.

Thanks jscher2000. The profile problem is not fixed (I am using a second computer with FF version 39.0.3 loaded). I've given up for now on using FF (any version) on the first computer. Regarding the untrusted sites, I use Kaspersky, and have not gotten beyond the FF error page for untrusted sites. So I'm not sure what error code I've gotten. The previous FF version (39.0.3) does not have these issues.
jscher2000
  • Top 10 Contributor
8785 giải pháp 71850 câu trả lời
Được đăng

Hi rickthomas, Firefox 40 shouldn't trust Kaspersky any less than Firefox 39... something might have changed during the update. Do you see an Old Firefox Data folder on the desktop, indicating that the Refresh feature ran?

Anyway, Kaspersky usually injects its signing certificate into Firefox's certificate file (cert8.db) automatically. I don't know whether you can coax Kaspersky to do that again, or whether you will need to fix it manually.

I found these steps in a post on the Kaspersky forums. The actual path on disk may vary depending on your product:


Open Firefox's Certificate Manager:

"3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > View Certificates button

In the Certificate Manager dialog, click the "Authorities" mini-tab (not the Servers mini-tab)

If you see an existing "Kaspersky Anti-Virus Personal Root Certificate"

Select it and Click "Delete or Distrust"

Now click "Import..."

Proceed to "C:\ProgramData\Kaspersky Lab\AVP15.0.1\Data\Cert\"

Select "(fake)Kaspersky Anti-Virus Personal Root Certificate.cer" and Open!


Does that work on your Firefox?

Hi rickthomas, Firefox 40 shouldn't trust Kaspersky any less than Firefox 39... something might have changed during the update. Do you see an Old Firefox Data folder on the desktop, indicating that the Refresh feature ran? Anyway, Kaspersky usually injects its signing certificate into Firefox's certificate file (cert8.db) automatically. I don't know whether you can coax Kaspersky to do that again, or whether you will need to fix it manually. I found these steps in a post on the Kaspersky forums. The actual path on disk may vary depending on your product: ---- Open Firefox's Certificate Manager: "3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > View Certificates button In the Certificate Manager dialog, click the "Authorities" mini-tab (not the Servers mini-tab) ''If you see an existing "Kaspersky Anti-Virus Personal Root Certificate"'' ''Select it and Click "Delete or Distrust"'' Now click "Import..." Proceed to "C:\ProgramData\Kaspersky Lab\AVP15.0.1\Data\Cert\" Select "(fake)Kaspersky Anti-Virus Personal Root Certificate.cer" and Open! ---- Does that work on your Firefox?