error code "SEC_ERROR_UNKNOWN_ISSUER" on secure internal websites
We have several internal VMware servers, that use SSL certificate, that were working just fine until a few days ago. Firefox 44.0 and chrome updates installed and suddenly stopped working. I get the same dumb error code "SEC_ERROR_UNKNOWN_ISSUER". I few the certificate it looks fine to me ... and it's internal. I add the Security exception same as I did when I first launched this expecting it to go passed this but NO!
Our firewall is now doing the same thing too.
I tried getting in both with IE 10 and it works after adding the exception? Why you guys gotta be like that?
الحل المُختار
Firefox doesn't come with a root certificate for the VMware certificate and thus can't build a complete certificate chain that ends in a root certificate. I don't know if VMware comes with such a root certificate, so you would have to check the VMware docs or alternatively check the certificate chain if you have a browser that works.
Read this answer in context 👍 0All Replies (7)
What does the certificate show when you inspect it in the Firefox certificate viewer?
You can retrieve the certificate and check details of certificates.
- click "Advanced" to expand the error message
- click "Add Exception" to open "Add Security Exception"
If this isn't possible then open "Add Security Exception" by pasting this URL in the location/address bar and paste the URL of the website (https://xxx.xxx) in it's location field.
- chrome://pippki/content/exceptionDialog.xul
Let Firefox retrieve the certificate -> "Get Certificate"
- click the "View" button and inspect the certificate
check who is the issuer of the certificate
You can see details like intermediate certificates that are used in the Details tab.
I have attached a screen shot of the certificate.
Screen shot of prior to certificate if that helps.
I tried adding the exception and importing the certificate. What should I be looking for ? It doesn't give a nice view like the one I posted. There are like a dozen or more lines to individually look at.
الحل المُختار
Firefox doesn't come with a root certificate for the VMware certificate and thus can't build a complete certificate chain that ends in a root certificate. I don't know if VMware comes with such a root certificate, so you would have to check the VMware docs or alternatively check the certificate chain if you have a browser that works.
I found the CA Certificate ... on my vmware vCenter server's default page after much searching. Bottom left hand corner. That was fun too! You have to save it as *.zip, extract and import all three files into Certificate Authorities tab.
Now I just have to figure out how to get the VM Client Integration Add-on to work?
Modified by shooker
Same problem was occurred.
I created vSphere6 evaluation environment, 6 month ago. This eval license was expired. I create new evaluation environment, as same hostname. Then, this problem was occurred.
Certfile was replaced but firefox could not work. IE and Chrome are good work.
I created new Firefox profile, then this problem was solved.