Funkcionalnosć toś togo sedła se pśez wótwardowańske źěła wobgranicujo, kótarež maju wašo dožywjenje pólěpšyś. Jolic nastawk waš problem njerozwězujo a cośo pšašanje stajiś, wobrośćo se na našo zgromoźeństwo pomocy, kótarež na to caka, wam na @FirefoxSupport na Twitter a /r/firefox na Reddit pomagaś.

Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

sec_error_unknown_issuer for a certificate trusted by every other browser

  • 3 wótegrona
  • 7 ma toś ten problem
  • 37 naglědow
  • Slědne wótegrono wót cor-el

milanovicsk
milanovicsk
more options

Dear Forum mebers,

I completely gave up this, so I hope somebody may have seen this issue and could resolve it :) We have an intranet corporate site, based on Windows Server 2012 R2 IIS server. I built up a single, WS2012R2 Standalone Root Certification Authority, and this CA only issued just one certificate -> for this site. After this, I imported the CA certificate to the trusted root certification authorities node via Group Policy.

Now, every single web browser can open the page without any problems (since the CA is trusted), only FireFox not. The issue happening is sec_error_unknown_issuer. What could I do with this? I tried to google a lot, but there is always speaking about intermediate certificates and certificate chain. But this time, there is absolutely no intermediate CA, since I have only a Root CA!

Are there any suggestions which I could try?

Thank you a lot for your help!

Best Regards, Christian

Dear Forum mebers, I completely gave up this, so I hope somebody may have seen this issue and could resolve it :) We have an intranet corporate site, based on Windows Server 2012 R2 IIS server. I built up a single, WS2012R2 Standalone Root Certification Authority, and this CA only issued just one certificate -> for this site. After this, I imported the CA certificate to the trusted root certification authorities node via Group Policy. Now, every single web browser can open the page without any problems (since the CA is trusted), only FireFox not. The issue happening is sec_error_unknown_issuer. What could I do with this? I tried to google a lot, but there is always speaking about intermediate certificates and certificate chain. But this time, there is absolutely no intermediate CA, since I have only a Root CA! Are there any suggestions which I could try? Thank you a lot for your help! Best Regards, Christian

Wšykne wótegrona (3)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Is that root certificate also imported in Firefox because Firefox uses its own certificate storage and stores extra certificates in the cert8.db file in the Firefox profile folder?

  • Tools > Options > Advanced > Certificates: View Certificates
milanovicsk
milanovicsk Pšašaŕ
more options

Dear cor-el,

Thank you a lot for your answer. This sounds really annoying, because I have 500 clients in my network, with really a lot firefox browser. So in your opinion, is there any way to have this certificate accepted remotely? Because simply I'm not able to import it on every machine, just from Group Policy or any other management feature. Maybe if I script this NSS Tool at logon, to import my custom Root CA?

ps.: If there aren't any way to do this, then how Firefox is used at huge companies? Like a similar situation when the company has it's own CA and intranet portal.

Thank you for your help! Christian

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Maybe try to add the certificate to the Firefox certificate store.