This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

this connection is untrusted

  • 7 replies
  • 3 have this problem
  • 5 views
  • Last reply by guigs

rahulparmar
rahulparmar
more options

dear sir,

i have watch guard firebox for controlling websites accessing and i have configured deep inspection for HTTPS site. for access these sites i have provide self signed CA certificate to internet users. and also i have imported the certificate in trusted root authority of Firefox on the system of internet users.

but when they open HTTPS sites Firefox not use self signed CA certificate and shows these errors (This Connection is Untrusted ).

please help?


regards rahul parmar

dear sir, i have watch guard firebox for controlling websites accessing and i have configured deep inspection for HTTPS site. for access these sites i have provide self signed CA certificate to internet users. and also i have imported the certificate in trusted root authority of Firefox on the system of internet users. but when they open HTTPS sites Firefox not use self signed CA certificate and shows these errors (This Connection is Untrusted ). please help? regards rahul parmar

All Replies (7)

guigs
guigs
more options

Hi rahulparmar,

I understand that the warning "The Connection is Untrusted" is showing up. It is possible for the users to add an exception: "This Connection is Untrusted" error message appears - What to do

However since they are self signed, it is also possible to check to make sure that they follow the guidelines for:

For specific debugging errors we are happy to help or refer to the certificates@mozilla.org address.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

If it works with other browser then check the certificate chain and see if you can export a trusted root certificate. Then you can import this certificate in Firefox and set the appropriate trust bits when prompted.

  • Tools > Options > Advanced > Certificates: View Certificates
rahulparmar
rahulparmar Question owner
more options

dear sir,

i have already imported the certificate in trusted root authorities.

but Firefox is not using this certificate. please help?


regards Rahul

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Do you see the certificate under Authorities? Tools > Options > Advanced > Encryption: Certificates > View Certificates : Authorities

Did you set the trust bit(s) of that certificate to make Firefox trust the as a root certificate? Otherwise Firefox wont' trust the certificate.

You can also check the certificate chain by clicking the globe/padlock on the location/address bar to see if this certificate is included.

guigs
guigs
more options

Does the CA certificate follow the guidelines? Disabling this policy in Firefox would cause serious security issues. If absolutely necessary see:https://support.mozilla.org/en-US/que.../1012765

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Note that disabling libPKIX support via security.use_mozillapkix_verification = false only applies to Firefox 31 and 32, so that is no longer possible in current releases.

  • Bug 975229 - Remove NSS-based certificate verification
guigs
guigs
more options

Corel thank you, please disregard my previous suggestion rahulparmar.