Getting SEC_ERROR_UNKNOWN_ISSUER, but help document did not help.
Hello.
I have an issue that is bugging me with a customer's Mac OS X 10.9 and Firefox 54.0.
Everything works for sites except for https://www.youtube.com. I gives an error saying the connection is not private, and the error code is: sec_error_unknown_issuer. I brought up yoputube on safari just fine, and when through the list of possible fixes. None of the fixes seem to have worked, but then youtube showed up properly. We started a video, it worked for about 15 seconds, then it goes back to the original error. If I close Firefox, and re-open it, the error comes back.
I tried everything in the following video:
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=5&cad=rja&uact=8&v ed=0ahUKEwi9muiRq-3UAhUB2oMKHZTLAC4QtwII…
I also tried everything here: https://support.mozilla.org/en-US/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER
Wybrane rozwiązanie
Yes we are using the proxy on purpose.
It turns out that we had to manually import the certificate from our network admins.. After that was done, it works fine.
Thanks,
Phoenix
Przeczytaj tę odpowiedź w całym kontekście 👍 0Wszystkie odpowiedzi (3)
Here is the certificate error text:
Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: true HTTP Public Key Pinning: true
Certificate chain:
BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIIbUXgfRenKyswDQYJKoZIhvcNAQELBQAwIzEhMB8GA1UE AxMYZGVjcnlwdHByb3h5LnNjaHdhbnMubmV0MB4XDTE3MDYyODA5NTA1OVoXDTE3 MDkyMDA5MjYwMFowZjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx FjAUBgNVBAcMDU1vdW50YWluIFZpZXcxEzARBgNVBAoMCkdvb2dsZSBJbmMxFTAT BgNVBAMMDCouZ29vZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMF4Sq3dKmcxkt0GpLDjEwapIBZJOX+euL5ZhsP9jLNo/dBd9kaCPXr6utNM h2d3SIn0OsvjkkRPgaMIK9lpxJyJ7qRpKABHj3SCODyekdnVcAQNa38kYHDqT8wR uN3D0sj/5QTffRt3TSoJ/zGx5JMNwuwDmlKAMHk1ZEejk4BtsRPbczubHX3GD9YG WH/3oTaTMcIjEwZbJR/dVdMKYQy1iU4lVJK68u4gjdxBtm1mOxsXtqE10iV+vMAa EaOF9b/RmKI6iAmt/yaqVfXnInvX1Cv0RyNbBPojpbWfa9KLVj1PT1Q9MEURp3vq M8l2trmrHsiTni2+pMzyEigIjNUCAwEAAaOCBDUwggQxMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjCCA+EGA1UdEQSCA9gwggPUggwqLmdvb2dsZS5jb22C DSouYW5kcm9pZC5jb22CFiouYXBwZW5naW5lLmdvb2dsZS5jb22CEiouY2xvdWQu Z29vZ2xlLmNvbYIUKi5kYjgzMzk1My5nb29nbGUuY26CBiouZy5jb4IOKi5nY3Au Z3Z0Mi5jb22CFiouZ29vZ2xlLWFuYWx5dGljcy5jb22CCyouZ29vZ2xlLmNhggsq Lmdvb2dsZS5jbIIOKi5nb29nbGUuY28uaW6CDiouZ29vZ2xlLmNvLmpwgg4qLmdv b2dsZS5jby51a4IPKi5nb29nbGUuY29tLmFygg8qLmdvb2dsZS5jb20uYXWCDyou Z29vZ2xlLmNvbS5icoIPKi5nb29nbGUuY29tLmNvgg8qLmdvb2dsZS5jb20ubXiC DyouZ29vZ2xlLmNvbS50coIPKi5nb29nbGUuY29tLnZuggsqLmdvb2dsZS5kZYIL Ki5nb29nbGUuZXOCCyouZ29vZ2xlLmZyggsqLmdvb2dsZS5odYILKi5nb29nbGUu aXSCCyouZ29vZ2xlLm5sggsqLmdvb2dsZS5wbIILKi5nb29nbGUucHSCEiouZ29v Z2xlYWRhcGlzLmNvbYIPKi5nb29nbGVhcGlzLmNughQqLmdvb2dsZWNvbW1lcmNl LmNvbYIRKi5nb29nbGV2aWRlby5jb22CDCouZ3N0YXRpYy5jboINKi5nc3RhdGlj LmNvbYIKKi5ndnQxLmNvbYIKKi5ndnQyLmNvbYIUKi5tZXRyaWMuZ3N0YXRpYy5j b22CDCoudXJjaGluLmNvbYIQKi51cmwuZ29vZ2xlLmNvbYIWKi55b3V0dWJlLW5v Y29va2llLmNvbYINKi55b3V0dWJlLmNvbYIWKi55b3V0dWJlZWR1Y2F0aW9uLmNv bYIHKi55dC5iZYILKi55dGltZy5jb22CGmFuZHJvaWQuY2xpZW50cy5nb29nbGUu Y29tggthbmRyb2lkLmNvbYIbZGV2ZWxvcGVyLmFuZHJvaWQuZ29vZ2xlLmNughxk ZXZlbG9wZXJzLmFuZHJvaWQuZ29vZ2xlLmNuggRnLmNvggZnb28uZ2yCFGdvb2ds ZS1hbmFseXRpY3MuY29tggpnb29nbGUuY29tghJnb29nbGVjb21tZXJjZS5jb22C GHNvdXJjZS5hbmRyb2lkLmdvb2dsZS5jboIKdXJjaGluLmNvbYIKd3d3Lmdvby5n bIIIeW91dHUuYmWCC3lvdXR1YmUuY29tghR5b3V0dWJlZWR1Y2F0aW9uLmNvbYIF eXQuYmUwHQYDVR0OBBYEFEuoV5uRuAwVZUgXTu80bWNRLtuoMAwGA1UdEwEB/wQC MAAwDQYJKoZIhvcNAQELBQADggEBACesyWs3RUBsDOOFw6URRrgRunoR0RhmelI9 5hPcwCnoPtEGpAOqfHg2zenWn3ObetxbC//q6IkP5H+tY/LfLZRvwb5lHnqpfA4w u9z7n/5S4n3AxpPipH+37B/nHZwD3HDJg0UAAkacfmg2V4Nm5RcvKAGIHSEzkYA2 P/iW8MBPp8152pI9qaWf6nQ6OPrDjogd8yP79S6gG7oMkqnG4BL2o/EyT3t6HxM6 /xDVb54als5uhH0OhpBP59u5tFMBkEURIMsK8jNc/MuVdv/ue9vtuIyvFJcMzXPe gLt1s/sgtlfXe5zYwXJ7h46K7ZJ8ZO5C6P2znnB0jk3ns64XQ48=
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgITfgAA2zqQ82jUnLmkFQABAADbOjANBgkqhkiG9w0BAQsF ADBbMRMwEQYKCZImiZPyLGQBGRYDbmV0MRUwEwYKCZImiZPyLGQBGRYFdHNmY28x LTArBgNVBAMTJFRoZSBTY2h3YW4gRm9vZCBDb21wYW55IElzc3VpbmcgQ0EgMTAe Fw0xNzAxMDkxODQ0MjBaFw0xOTAxMDkxODU0MjBaMCMxITAfBgNVBAMTGGRlY3J5 cHRwcm94eS5zY2h3YW5zLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOuOJEp+6dJcy/zQ59qJQjnurBiZIs1elSiSVllw39nCMVSyXSeU+w8ICetv 6TraBEoGVPiKVlaFazt0xmZ/BbV9+lYJAajL6WIWEIm+Ay53ydJd8dXMn03H2RIU 8AvjZJQCIcSZIFYtoGVCrzbuRC3CC+kZqa/mP0TwcIWLKzJVjTu+z2CmnkTWcAWa sy3klaVgjIRIhGbhmE6zIGkxNT4KhmtkLKBogzGSsIT3+n89mNlj5tbrB4mk36o2 Fmw1im/coxsiT0xRgHA4ZwBJ2o8D1IEidLDe2E5n+gcovlzL14SLDL3e4P1WzTgj w9Yq9gUBPK6oUmUw0DIjgUj7ilkCAwEAAaOCA2IwggNeMB0GA1UdDgQWBBT9stX3 nvj7t0kNP1bmK5q51xNPGjAfBgNVHSMEGDAWgBSN9F4PvfZkHxRs+xMaykjMwEqc OTCCAUkGA1UdHwSCAUAwggE8MIIBOKCCATSgggEwhlBodHRwOi8vY3JsLnRzZmNv YXBwLm5ldC9jcmwvVGhlJTIwU2Nod2FuJTIwRm9vZCUyMENvbXBhbnklMjBJc3N1 aW5nJTIwQ0ElMjAxLmNybIaB22xkYXA6Ly8vQ049VGhlJTIwU2Nod2FuJTIwRm9v ZCUyMENvbXBhbnklMjBJc3N1aW5nJTIwQ0ElMjAxLENOPU1SUzFBRENQQ1NTMDIs Q049Q0RQLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENO PUNvbmZpZ3VyYXRpb24sREM9dHNmY28sREM9bmV0P2NlcnRpZmljYXRlUmV2b2Nh dGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDCC AW0GCCsGAQUFBwEBBIIBXzCCAVswgc0GCCsGAQUFBzAChoHAbGRhcDovLy9DTj1U aGUlMjBTY2h3YW4lMjBGb29kJTIwQ29tcGFueSUyMElzc3VpbmclMjBDQSUyMDEs Q049QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENO PUNvbmZpZ3VyYXRpb24sREM9dHNmY28sREM9bmV0P2NBQ2VydGlmaWNhdGU/YmFz ZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MF8GCCsGAQUFBzAC hlNodHRwOi8vY3JsLnRzZmNvYXBwLm5ldC9jcmwvVGhlJTIwU2Nod2FuJTIwRm9v ZCUyMENvbXBhbnklMjBJc3N1aW5nJTIwQ0ElMjAxKDEpLmNydDAoBggrBgEFBQcw AYYcaHR0cDovL2NybC50c2Zjb2FwcC5uZXQvb2NzcDAPBgNVHRMBAf8EBTADAQH/ MA4GA1UdDwEB/wQEAwIBhjA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQjMzBWE m7pmhZGRNofs2heGjZ0XgUKDro1eh8fTSQIBZAIBBjANBgkqhkiG9w0BAQsFAAOC AQEAPLTUVvfP3Go7Kc8nRVNjHfpT7U9n/4b7JJzHCw+jMjZy1ehtYIK0un00xkRP UQO5ySLVoNDLOivSjDBSByLIe3sJa0ED2YMWwwQ+7euUOZBD5nSkp4D2y0QAnnbX HBmAL0mi26y4PkD6nZ7C6YusVoZ7S/E419qfgwTGoRiottj4a+DvsxAMtoz+fSE3 O+YKdq8JQAo5jbzrrk/YaaM9AZicN/ZNu1kpjA9I3+lOZYIRxrDrhnMmLk0Dli5w cCqoHFut08MRAj1BXKAkvU2vEljNYugyGS4b6AsDVpNo8grWh1EhyVW+OayKbafk VJh/7vU3eAWnWNe6lfBeNQzSUg==
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgITEwAAAARI0B9Y5+i91QAAAAAABDANBgkqhkiG9w0BAQsF ADBWMRMwEQYKCZImiZPyLGQBGRYDTkVUMRUwEwYKCZImiZPyLGQBGRYFVFNGQ08x KDAmBgNVBAMTH1RoZSBTY2h3YW4gRm9vZCBDb21wYW55IFJvb3QgQ0EwHhcNMTUw ODI2MjAzMTE5WhcNMjAwODI2MjA0MTE5WjBbMRMwEQYKCZImiZPyLGQBGRYDbmV0 MRUwEwYKCZImiZPyLGQBGRYFdHNmY28xLTArBgNVBAMTJFRoZSBTY2h3YW4gRm9v ZCBDb21wYW55IElzc3VpbmcgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAJqMcQjVxzx7sXkjpET3WYXjIm1jciSQYpt7Es0oP6NanhzV3jGblw9H xky+2Ci4quFrabfzaF7qlXPZd5zqMuj5N2yhWcqrvIH5PeL0IqwzFaf2bMLzPrOX guVhKrozEbPKMdh9EQ/YH3tNSH0fXOWHIRXc/fjfWoxIIZLaWwQqZff62n9WcBiG flTFRRQSIi94EZ2LKdi5mOHzOuxRhBp8dDH/EyQzYzTu5gK4y3UpfoECmT3hbcyU RpAYKzXCsH6XM0/AEC6BxkbWOytqsfA8i/QLErVIauKw9Q1J4ihqdQBeuYP/GAz4 mkMo4uTSYQrazyIocHob0ptcUypudh8CAwEAAaOCAxgwggMUMBAGCSsGAQQBgjcV AQQDAgEBMCMGCSsGAQQBgjcVAgQWBBS5gqH01nW05HAgduzY1cRyTzRV+TAdBgNV HQ4EFgQUjfReD732ZB8UbPsTGspIzMBKnDkwGQYJKwYBBAGCNxQCBAweCgBTAHUA YgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU nFho3DXkphkPwUSAX7iCCTA+I2EwggEqBgNVHR8EggEhMIIBHTCCARmgggEVoIIB EYaBw2xkYXA6Ly8vQ049VGhlJTIwU2Nod2FuJTIwRm9vZCUyMENvbXBhbnklMjBS b290JTIwQ0EsQ049Q0RQLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNl cnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9VFNGQ08sREM9TkVUP2NlcnRpZmlj YXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRp b25Qb2ludIZJaHR0cDovL2NybC50c2Zjb2FwcC5uZXQvY3JsL1RoZSUyMFNjaHdh biUyMEZvb2QlMjBDb21wYW55JTIwUm9vdCUyMENBLmNybDCCATIGCCsGAQUFBwEB BIIBJDCCASAwgcYGCCsGAQUFBzAChoG5bGRhcDovLy9DTj1UaGUlMjBTY2h3YW4l MjBGb29kJTIwQ29tcGFueSUyMFJvb3QlMjBDQSxDTj1BSUEsQ049UHVibGljJTIw S2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixEQz1U U0ZDTyxEQz1ORVQ/Y0FDZXJ0aWZpY2F0ZT9iYXNlP29iamVjdENsYXNzPWNlcnRp ZmljYXRpb25BdXRob3JpdHkwVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcmwudHNmY29h cHAubmV0L2NybC9UaGUlMjBTY2h3YW4lMjBGb29kJTIwQ29tcGFueSUyMFJvb3Ql MjBDQS5jcnQwDQYJKoZIhvcNAQELBQADggEBAAl4SQzTXRStMyAtesM06RZMH4b+ blqzYQPcl44n8VrXTfdAsVgeThmUGqMmogAfcdJMddNXh6iEU85DjMDfWG6JyERF bIfsxGWyw8GrcizHTj4Xo4EGxzcpQPTK0HtVFGVNb1TJUzYVm9o04a8aO4qrraab lKLcVWgXlOVCzsjxdxJll1Xr6GKaSyVJseshEE0l62BrrvRQYgveg1Gzn0j0UT9i akrLg2FEp02AxCn/W/iVTOB8k9uHG2cifY3MOwVJspkAAqLtcKrHhcTdep2n/Pgb sm3GPLVRSprMQGkynWl6OnVuRJy6eDaNXiFlb9DkcxnTCgxekX4xLZve6ts=
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIDhzCCAm+gAwIBAgIQZxsJ6elvE75Cirf0MyH/zDANBgkqhkiG9w0BAQsFADBW MRMwEQYKCZImiZPyLGQBGRYDTkVUMRUwEwYKCZImiZPyLGQBGRYFVFNGQ08xKDAm BgNVBAMTH1RoZSBTY2h3YW4gRm9vZCBDb21wYW55IFJvb3QgQ0EwHhcNMTIxMjIw MTU1MzU1WhcNMjQxMjIwMTYwMzU0WjBWMRMwEQYKCZImiZPyLGQBGRYDTkVUMRUw EwYKCZImiZPyLGQBGRYFVFNGQ08xKDAmBgNVBAMTH1RoZSBTY2h3YW4gRm9vZCBD b21wYW55IFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5 TlBRwn7KZqqSCmGDwZIu4DMHGMCLiCYCJ83nxaupNwQHUEINIgakIJqHEWuUwuRX Y/MO5Od4sYtdCJhJneEhsuyLxQRSN/dpHMjXfiITb6zmo8sQXNZu3FuPbxDagMUm KqTYUX54qjtM92dzqNaFF8/I0WJv0Bkx/paGBPUcvdTKQBc9zDQ60mJI+7GM4DMY 4YayUvBky3jEAa5neiBNzujz/lj5rUow0nSlMiXHuKxYznMWtoWWSmbAX4h3IhC8 6rFXIKWzw3jX9g8Bku3tbRRlhAhaZpMoR7NBsXJzCZf167Rt3uQuYF2ch4Hm8QfS VRFu29xyAWNWdKGc/UMNAgMBAAGjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8E BTADAQH/MB0GA1UdDgQWBBScWGjcNeSmGQ/BRIBfuIIJMD4jYTAQBgkrBgEEAYI3 FQEEAwIBADANBgkqhkiG9w0BAQsFAAOCAQEAOBTdtl7BCUhnVEjRWe06g4df6s35 ooHq8042wew5A1UMSpSYGyCDs5iMJ8NQDvVX+UvDb4K3qP6Ob0nLnhnwjnYFI6+Z VsCj40McDnF/vVY3jELmPvL2Os32hRL/16i8k2FWXfkGN+CzFTVcLCTiC2Lw9f0E 5BH8M8XgaATmv8VAZSPm2J2cXJzaSrapds0cQPCE2DczicTI1GCMGKmddBvdK0se k39QwDEKjrkBzrorjqoyZ+9tKKhPTnWm1rXqa/YD8g5M+ReGbZ+kBGF5wmO1Ii65 Vih9e//v8632jL/AmWGXdGVj6jm70AS4epla+ObwRdesOyYsDaG+XsySmg==
END CERTIFICATE-----
The issuer of the certificate is decryptproxy.schwans.net The certificate chain includes these two certificates, the first an intermediate certificate and the second a self-signed root certificate:
- decryptproxy.schwans.net
- The Schwan Food Company Root CA
This root certificate isn't trusted in Firefox (that would require trust bits set).
Are you using this proxy on purpose?
Wybrane rozwiązanie
Yes we are using the proxy on purpose.
It turns out that we had to manually import the certificate from our network admins.. After that was done, it works fine.
Thanks,
Phoenix