This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Caută ajutor

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Află mai multe

Acest fir de discuție a fost arhivat. Adresează o întrebare nouă dacă ai nevoie de ajutor.

Firefox doesn't recognize a certificate by Sectigo Ltd on certain Linux machines

  • 1 răspuns
  • 1 are această problemă
  • 2 vizualizări
  • Ultimul răspuns de info1972

info1972
info1972
more options

I try to open https://botcompany.de in Firefox 74.

On one Linux machine (Peppermint 10), it works fine.

On another Linux machine (Ubuntu 18.04), I get a certificate error (SEC_ERROR_UNKNOWN_ISSUER).

Where does this difference come from? I need my certificate to be recognized on all machines.

Thanks

I try to open https://botcompany.de in Firefox 74. On one Linux machine (Peppermint 10), it works fine. On another Linux machine (Ubuntu 18.04), I get a certificate error (SEC_ERROR_UNKNOWN_ISSUER). Where does this difference come from? I need my certificate to be recognized on all machines. Thanks

Soluție aleasă

Hey guys, problem SOLVED.

I needed to put the full chain instead of just the certificate in my keystore (webserver is written in Java). Posting the crucial code here to help others:

cat privkey.pem fullchain.pem >priv-and-cert.pem openssl pkcs12 -export -out keystore.p12 -in priv-and-cert.pem -name mydomain.name

Citește acest răspuns în context 👍 0

Toate răspunsurile (1)

info1972
info1972 Deținătorul întrebării
more options

Soluție aleasă

Hey guys, problem SOLVED.

I needed to put the full chain instead of just the certificate in my keystore (webserver is written in Java). Posting the crucial code here to help others:

cat privkey.pem fullchain.pem >priv-and-cert.pem openssl pkcs12 -export -out keystore.p12 -in priv-and-cert.pem -name mydomain.name