SSL Errors - Sec_error_unknown_issuer

I've got this error message on a site that I KNOW has a valid SSL and CA Certficate however ONLY FF has this issue with the website. The SSL is from GeoTrust, valid until 10.21.15. It's difficult enough to get to this sticking support page, FF needs to fix your problems because this is ridiculous. I've read multiple posts from many people that FF Browser isn't working, and the answers from the contributers is to check the time, date, on the PC? What is that going to do, just so I don't waste anymore of my time. My time and date is fine.
The sites CA Bundle is from GeoTrust and everything works GREAT! On every other browser in this world except for FF. Fix your crap!!!

Due to security issues I will not be adding the URL to this post. I did however figure out the problem. Seems that older versions of FF don't play nicely with SSL's. I ended up having to update my FF Browser to fix this issue. I was on v. 20 and upgraded to v. 35. That seems to have fixed the issue and I've had to report back to the client with this information. I apologize for my rant, I was quite frustrated with both the issue and how difficult it was to register for support to post this question.
FF should maybe think about adding a Registration link in the Log In section so people don't have to jump through hoops to post a support question.

Similar Messages

  • On some sites we get sec_error_unknown_issuer SSL error due to missing root certificate TC TrustCenter Class 2 L1 CA XI. Firefox is the only browser having this issue. Why is that certificate not preinstalled and shipped with Firefox?

    On some sites we get sec_error_unknown_issuer SSL error due to missing root certificate TC TrustCenter Class 2 L1 CA XI. Firefox is the only browser having this issue. Why is that certificate not preinstalled and shipped with Firefox?
    Check sales.sauer-danfoss.com for details with Firefox 7.
    Thanks
    Stefan

    You are not sending the TC TrustCenter Class 2 L1 CA XI intermediate certificate
    *http://sales.sauer-danfoss.com/
    Web servers need to send all required intermediate certificates to build the chain to build-in root certificates.
    You need to install that intermediate certificate on your server.
    *http://www.trustcenter.de/en/infocenter/root_certificates.htm#3479
    You can test the certificate chain via a site like this:
    *http://www.networking4all.com/en/support/tools/site+check/

  • Firefox error "sec_error_unknown_issuer"

    After years and years of using Firefox, I decided to leave it and start using Google Chrome.
    Why ?
    Because Firefox returns error "sec_error_unknown_issuer" very often, when I access to my usual websites.
    Something must have been wrong with last Firefox update.
    Getting these SSL errors on every other site is starting to really get annoying! There is nothing wrong with the SSL certificates or the sites. It's your browser that is unable to verify the certificates.
    When you fix it, maybe (only maybe) shall I return to Firefox.
    Have a good day.

    hello, this is most probably caused by external factors and a possible solution depends on different factors. please attempt to add an exception on the bottom of the error page & inspect the certificate (see the screenshot attached for instructions):
    <br>which '''issuer information''' does the certificate contain?
    thank you!
    [["This Connection is Untrusted" error message appears - What to do]]

  • SSL Error in Apache

    I am getting what appear to be SSL errors in the apache logs when I try and use an SSL certificate on a website listening on a non-standard port.
    I have a site, lets call it test.example.com, that is setup on port 8843. When I use no SSL cert, I have no problems. When I select a cert and restart apache, I get the following errors in the apache error log and the whole web server become non-responsive and will not load any webpages.
    [Tue Dec 02 20:19:22 2014] [notice] Apache/2.2.26 (Unix) DAV/2 PHP/5.4.30 mod_ssl/2.2.26 OpenSSL/0.9.8za configured -- resuming normal operations
    [Tue Dec 02 20:30:19 2014] [notice] caught SIGTERM, shutting down
    [Tue Dec 02 20:30:22 2014] [error] Init: Pass phrase incorrect
    [Tue Dec 02 20:30:22 2014] [error] SSL Library Error: 218710120 error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
    [Tue Dec 02 20:30:22 2014] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
    [Tue Dec 02 20:30:22 2014] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
    [Tue Dec 02 20:30:22 2014] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
    [Tue Dec 02 20:30:32 2014] [crit] (17)File exists: mod_rewrite: Parent could not create RewriteLock file /var/log/apache2/rewrite.lock
    Configuration Failed
    [Tue Dec 02 20:30:42 2014] [error] Init: Pass phrase incorrect
    [Tue Dec 02 20:30:42 2014] [error] SSL Library Error: 218710120 error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
    [Tue Dec 02 20:30:42 2014] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
    [Tue Dec 02 20:30:42 2014] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
    [Tue Dec 02 20:30:42 2014] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
    [Tue Dec 02 20:30:52 2014] [crit] (17)File exists: mod_rewrite: Parent could not create RewriteLock file /var/log/apache2/rewrite.lock
    Configuration Failed
    I also get these errors in the system log:
    12/2/14 8:30:22.716 PM com.apple.launchd[1]: (org.apache.httpd[4009]) Exited with code: 1
    12/2/14 8:30:22.716 PM com.apple.launchd[1]: (org.apache.httpd) Throttling respawn: Will start in 10 seconds
    12/2/14 8:30:32.757 PM com.apple.launchd[1]: (org.apache.httpd[4023]) Exited with code: 1
    12/2/14 8:30:32.757 PM com.apple.launchd[1]: (org.apache.httpd) Throttling respawn: Will start in 10 seconds
    12/2/14 8:30:42.884 PM com.apple.launchd[1]: (org.apache.httpd[4031]) Exited with code: 1
    12/2/14 8:30:42.884 PM com.apple.launchd[1]: (org.apache.httpd) Throttling respawn: Will start in 10 seconds
    Can anybody here tell me why this is happening? I get these errors no matter what certificate I use.
    Thanks!

    Yep. That's an encrypted key. The server software is doing the decryption automagically for you when you do things The Apple Way™. But when you try to do your own thing on your own port, that functionality gets bypassed..
    If you know the passphrase you used to set up the key in the first place, you can use openssl commands to create a decrypted version of the key file for your use. If not, Use the openssl commands to make your own new key/cert pair.
    There is a good how to one this and other basic ssl commands at:
    https://www.sslshopper.com/article-most-common-openssl-commands.html

  • SSL Error after upgrading to Windows 8.1

    After upgrade my Windows 8 to Windows 8.1, I got this SSL Error when I tried to go to "https://google.com":
    http://i.stack.imgur.com/2kaXO.png
    ...and this in IE: http://i.stack.imgur.com/7Gxbw.png
    I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if anybody is tracking my network, but none of them seem to be the problem.
    Anyone can help me? Thanks a lot...
    EDIT: I have checked my browsers and just figure out that every connection from my computer is not able to connect to any SSL connection, for example Yahoo Messenger login. I'm thinking my computer SSL Certificate got serious problem, is
    there anyway to "reset" it?

    Hi,
    For the issue, it can happen for a wide variety of reasons.
    I suggest we try the following methods to narrow down the issue.
    Method 1.
    Clear the Secure Sockets Layer (SSL) state:
    In Internet Explorer, click Tools, and then click Internet Options.
    Click the Content tab, and then click Clear SSL state.
    Method 2.
    Press Win+X, and then click Command Prompt(Admin).
    At the command prompt, type sfc /scannow, and then press ENTER.
    Method 3.
    Press Win+R, type regedit in the box, and then press ENTER.
    Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl
    On the Edit menu, point to New, and then click Key.
    Type FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB950067 to name the new registry subkey, and then press ENTER.
    On the Edit menu, point to New, and then click DWORD Value.
    Type iexplore.exe to name the new registry entry, and then press ENTER.
    On the Edit menu, click Modify.
    Type 1, and then click OK.
    Exit Registry Editor.
    If the issue persists, I suggest you reinstall the IE to check the result.
    Hope these could be helpful.
    Regards,
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • SSL error happened while calling a web service on a managed oc4j instance

    While calling a webservice, I got SSL Error: Unrecognized SSL message, plaintext connection? The webservice is deployed on a managed oc4j which is created on a 10.1.3.4 oracle application server. We have SSL certificate installed for http server.
    Any ideas?
    Thanks!

    Hello,
    The error is stating there isn't a descriptor for the Agent class the app is trying to execute a query on. This could be due to improper mappings, but assuming Agent is mapped, is more likely due to a classloader issue. TopLink uses the classloader at login to initialize the descriptors and hash them on the Class objects. If the application uses a different classloader, descriptors will not be found for classes loaded from the new classloader. How are you obtaining sessions, and where is the session being used?
    Best Regards,
    Chris

  • SSL Error 61: chosen not to trust security certificate; How to bypass?

    I am trying to utilize Citrix XenApp to remotely access my work userid and applications from home. I can login and see my virtual desktop/applications, but when I try to run an application I get SSL Error 61: you have chosen not to trust "Equifax Secure Global eBusiness CA-1" the issuer of the server's security certificate. I have tried to update the certificate (FFx says its valid), add an exception (cannot because certif is valid), uninstall/reinstall application (no good), but still no luck. Have contacted my company's IT and they are baffled as well. Any ideas to bypass or redo a setting that says I do trust this certificate would be welcome.

    Pardon my ignorance, but can you please explain further. I've read over the info from the link provided but it is beyond my technical comprehension. Is the Citrix database on my end, on my company server's end?

  • VSphere Client SSL error build 10041

    So I'm seeing an odd error after upgrading to build 10041 (from 9926). The vSphere client (both 5.1 and 5.5) will no longer connect to my vCenter instance. I receive the following error
    "vSphere Client could not connect to "<server>" An unknown connection error occured. (The request failed due to an SSL error. (The request was aborted: Could not create SSL/TLS secure channel.))"
    Checking the event log I see Schannel 36888 errors with the following message: "A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows
    SChannel error state is 813."
    I managed to find out that error 40 means "handshake_failure". The error state (813) I haven't been able to find additional information on.
    When I look at the vpxd.log file I see the following log lines which seems to confirm its a handshake error.
    2015-04-02T13:26:08.442-05:00 [07548 error 'Default'] SSLStreamImpl::DoServerHandshake for SSL(TCPStreamWin32(socket=TCP(fd=38244) local=xxx:443,  peer=yyy:64839)): SSL_accept failed with BIO Error
    2015-04-02T13:26:08.442-05:00 [07548 warning 'ProxySvc'] SSL Handshake failed for stream TCPStreamWin32(socket=TCP(fd=38244) local=xxx:443,  peer=yyy:64839), error: class Vmacore::Ssl::SSLException(SSL Exception: BIO Error)
    Does anyone know if there were any changes around Schannel that would be causing a handshake error? I can't seem to find any additional information. It looks like vCenter accepts TLS 1.0, which in IE at least is enabled.

    Hi Jeff,
    I think we'd better involve the VMware side to further look at this issue.
    For Windows 10 build 10049, you might need to notice the information below:
    No access to Internet Protocol (v4 or v6) in 10049
    Best regards
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • SSL Error when logging into Jabber

    In order to chat with my friends that use GoogleTalk, I have to use the Jabber part of iChat AV 3. Every time I try to log in, it says "An unexpected SSL error occured. [-9843]" I have searched the Support site and cannot find anything to address how to fix this. Any suggestions?
    On another note, using my .mac account to try and voice chat with iChat AV 3, I am constantly getting the error message. "Insufficient bandwidth to maintain conference."
    Any help would be appreciated!

    Welcome to the Apple Discussions, Sara!
    For the GoogleTalk issue, it is being addressed by Google and is a known issue at this time. Expect a fix in the next few days or so.
    With the Insufficient Bandwidth message... are you connecting to another iChat user or an AIM user? If iChat, make sure that person is using the latest version of iChat available. Also, make sure your bandwidth up and down is sufficient (which it should be) by going to http://testmy.net and clicking "Download Speed." Report the results back here.
    -Ryan

  • SSL Errors - Sometimes

    Hello,
    Sometimes when I visit our online order form I get the SSL errors "This website does not supply identity information" and "The connection to this website is not fully secure (images)."
    However, if I reload the page, the errors disappear and the connection is secure.
    I have checked all the paths to make sure we were calling only the https versions of images, etc, but I cannot figure out why sometimes I get the warning triangle and other times I get the padloack.
    I have only noticed this issue in Firefox (not chrome or safari) and can only replicate the issue when I click on the "Order Now" button on the following page:
    http://www.cannabisclubnetwork.com/solutions/specials.htm
    I have reached out to our hosting company and SSL provider, but neither can solve the problem. I am wondering if the issue is only confined to Firefox?
    I took a screenshot of the error messages and uploaded them to our server, located at:
    http://www.cannabisclubnetwork.com/images/ssl-error-ccn.gif
    Any help would be greatly appreciated.
    Thank you!!

    The gray triangle indicates that some of the display content in the page was retrieved over a regular HTTP connection instead of an HTTPS connection.
    (I wouldn't worry too much about the identify not being verified. You need to pricey EVSSL certificate (green lock) before Firefox shows identity information.)
    Another way to try to discover the mixed content is to use Firefox's Browser Console. To open the console, press Ctrl+Shift+j. Make sure the "Security" button with the red dot is depressed on the black bar. (If you're not sure, click a few times until you see that it is darker and looks pressed in.)
    In the "Filter output" box at the upper left, type '''mix''' and pause while the list is filtered. You might not see anything at this point.
    Leaving this dialog open, switch back to your page and reload (you can reload bypassing the cache using Ctrl+Shift+r). If you get the mixed display content warning, check the Browser Console for a security message. I have attached an example.

  • SSL ERROR : The required certificate was not found

    I am using Adobe Javascript this.submitForm to submit FDF. This works fine in Windows. When the same pdf is opened in a Linux environment I get the following error:
    SSL ERROR : The required certificate was not found
    and am required to run acroread -installCertificate.
    This I do and it succeeds but the SSL error persists.
    The this.submitForm command is given below:
    /this.submitForm({cURL: 'https://some-webpath/FILE.cgi#FDF',bFDF: true,bGet: false});
    When reading the documentation for the submitForm I see that the Acrobat Web Capture plug-in should be installed: I notice this is the case in Windows but not in Linux. Where can I get this?

    Hi Ben,
    The behavior you have noticed with the newly installed certificate files in
    [home-folder]/.adobe/Acrobat/[version]/Cert folder
    and the
    [install-folder]/Adobe/Reader8/Reader/Cert/curl-ca-bundle.crt file is correct. Further, the behavior has not changed between Reader versions 8.x and 9.x
    It is possible that the problem may be of the installed certificate not linking up to one of the Root CA-s. An Intermedia-CA certificate may be needed to be installed.
    Could you mail me at " sanath at adobe dot com ", if possible, with more information about the problem (the PDF, the certificate in question - the file named like 123456.0 ), so that we at Adobe can work on resolving your problem
    Regards
    Sandip

  • SSL error Registering on Oracle Linux Network

    I performed the following actions using Linux v4 update 4.
    [root@as1 ~]# rpm --import /usr/share/rhn/RPM-GPG-KEY
    [root@as1 ~]# up2date nox register
    There was an SSL error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')]
    A common cause of this error is the system time being incorrect. Verify that the time on this system is correct.
    I check the time and date. They are correct to the second.
    Any suggestions on how to proceed?

    Also , if i choose to ignore all these massages, database is installed.But, startup command fails giving following error :
    ORA-01078: failure in processing system parameters
    LRM-00109: could not open parameter file '/scratch/nnaveen/installations/ora_db11.2.0.1.0/product/11.2.0/dbhome_1/dbs/initorcl.us.oracle.com.ora'
    I guess its one of the side effect of database configuration assistant not working properly

  • SSL error 61

    What do I do ? My macbook air does not trust when I try to lock on a cetrix server, that has to have full control.
    Is writes: SSL error 61. You have not chosen to trust VeriSign 3 international server CA-C3 the issuer of the servers serurity certificate.
    What do I do ?

    Satellite M305-S4910 
    SSL Error 61: You have not chosen to trust "Entrust.net Secure Server Certification Authority"
    Scroll down to..
       Error message: "The server certificate received is not trusted (SSL error 61)."
    at Citrix' site..
       Common SSL Error Messages and Their Causes
    -Jerry

  • Ssl error on mac pro email

    I tried to set up a new email account but I seem to have a error. Mail can't verify the identity of ... An SSL error has occurred and a secure connection to the server cannot be made

    There is a mail setup config wizard
      http://www.apple.com/support/mail
      Mac OS X Forums
    https://discussions.apple.com/community/mac_os?view=discussions

  • SSL error occurred, secure connextion cannot be made

    Hello everyone,
    I was trying to put a picture online on my blogger-blog with MarsEdit when I got this weird error: An SSL error has occurred and a secure connection to the server cannot be made.
    When I checked MarsEdit net-log, there was an URL: https://www.google.com/accounts/ClientLogin
    If I go to this URL with Firefox, no problem, I get a standard error-messag: Error=BadAuthentication
    But if I go there with Safari, I can't reach the page at all. So, something tells me I have some network-problem or ssl/identification problem somewhere into my OS, no?
    Any idea of what I can do against that? Anyone?
    Thank you for your answers.
    Cyril

    I had this happen a while ago too when I switched development machines, but I was able to submit it from a friend's house, so I'm pretty sure it is my ISP but this should not be a problem. I am trying to push out another update and I'm having the same problem again. I would be very happy if there was a permanent solution to this problem.

Maybe you are looking for