Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Get SEC_ERROR_UNKNOWN_ISSUER when FF is starting and open default https page

  • 3 replies
  • 1 has this problem
  • 18 views
  • Last reply by cor-el

bakoff
bakoff
more options

My home page in FF is https://portal.local/ Certificate is enterprise CA signed In windows cert storage root CA certinicate is present In FF setting security.enterprise_roots.enabled;true but when FF startting i have error SEC_ERROR_UNKNOWN_ISSUER. btw if i press F5 on this tab connection is established and i can see my home page. FF on start use internal cert storage ? This trouble start from FF 67.0 in FF 66.05 good work.

My home page in FF is https://portal.local/ Certificate is enterprise CA signed In windows cert storage root CA certinicate is present In FF setting security.enterprise_roots.enabled;true but when FF startting i have error SEC_ERROR_UNKNOWN_ISSUER. btw if i press F5 on this tab connection is established and i can see my home page. FF on start use internal cert storage ? This trouble start from FF 67.0 in FF 66.05 good work.

All Replies (3)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Do you possibly have this root certificate installed in Firefox ?

Does it work if you install this certificate in Firefox and set the trust bit to make it work as a rot certificate ?

  • Options/Preferences -> Privacy & Security
    Certificates: View Certificates
bakoff
bakoff Question owner
more options

No. This root certificate not installed in FF Yes. If install our root cert in FF site on start FF working fine. But! I don't want use FF cert storage (security.enterprise_roots.enabled;true). In Windows cert storage this cert is installed via AD. When refreshing this page after 10-12 sec after start it's work fine. but on starting FF i have SEC_ERROR_UNKNOWN_ISSUER

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Only added certificates are imported if you set this pref.