搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

Learn More

CA Signed Certificate shows as "not valid"

  • 4 回覆
  • 1 有這個問題
  • 357 次檢視
  • 最近回覆由 jCubed

more options

There is a certificate for an internal website that FireFox is saying is not valid/secure and it makes you add an exception. However, if you use IE, Edge or Chrome it loads fine with the valid CA Certificate. I've cleared all data (cache/etc...) and it hasn't fixed it. Hopefully someone has a fix for this?

Getting "SEC_ERROR_UNKNOWN_ISSUER" for the certificate and its saying:

   Peer’s Certificate issuer is not recognized.
   HTTP Strict Transport Security: false
   HTTP Public Key Pinning: false


FireFox Version: 91.8.0esr (64-bit) Operating System: Windows 10 (64-bit)

There is a certificate for an internal website that FireFox is saying is not valid/secure and it makes you add an exception. However, if you use IE, Edge or Chrome it loads fine with the valid CA Certificate. I've cleared all data (cache/etc...) and it hasn't fixed it. Hopefully someone has a fix for this? Getting "SEC_ERROR_UNKNOWN_ISSUER" for the certificate and its saying: Peer’s Certificate issuer is not recognized. HTTP Strict Transport Security: false HTTP Public Key Pinning: false FireFox Version: 91.8.0esr (64-bit) Operating System: Windows 10 (64-bit)

由 jCubed 於 修改

被選擇的解決方法

Firefox does not use the operating system certificate store by default.

Can you go to about:config and search for the preference

security.enterprise_roots.enabled

and change it to true and see if that fixes things?

從原來的回覆中察看解決方案 👍 1

所有回覆 (4)

more options

選擇的解決方法

Firefox does not use the operating system certificate store by default.

Can you go to about:config and search for the preference

security.enterprise_roots.enabled

and change it to true and see if that fixes things?

more options

So, that fixed it, thanks! But why would that matter? The certificate is loaded to the server itself. The certificate was not loaded to GPO, windows store or anything else. Only applied to the server itself.

more options

My guess is that your company uses a custom certificate authority for that site (not a public one) and they load that CA into Windows expecting it to work.

more options

That could be. Just not disclosed to us after its generated on specifically what they did. Thanks!