搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Missing Microsoft certificates (SEC_ERROR_UNKNOWN_ISSUER)

more options

Hi guys,

I'm running Firefox ESR 52.4.0 (Debian) and 52.4.1 (Windows) and noticed that some Microsoft certificates are not installed by default. https://www.catalog.update.microsoft.com/ gives SEC_ERROR_UNKNOWN_ISSUER.

It turned out, that e. g. Microsoft IT TLS CA 5 is not installed by default.

Source: https://www.microsoft.com/pki/mscorp/cps/default.htm

Installing the certificate manually, solved the issue.

Is it a bug or a feature?

Hi guys, I'm running Firefox ESR 52.4.0 (Debian) and 52.4.1 (Windows) and noticed that some Microsoft certificates are not installed by default. https://www.catalog.update.microsoft.com/ gives SEC_ERROR_UNKNOWN_ISSUER. It turned out, that e. g. Microsoft IT TLS CA 5 is not installed by default. Source: https://www.microsoft.com/pki/mscorp/cps/default.htm Installing the certificate manually, solved the issue. Is it a bug or a feature?

所有回覆 (4)

more options

Firefox ships with certain trusted root certificates, but most website certificates do require one or more intermediate certificates to complete the chain of trust up to the root.

Usually if a site sends the intermediate certificate to Firefox, there's no problem. It seems fine for me accessing right now in Firefox 56. Also, the SSLLabs test page shows no problems. Perhaps it was a transient glitch?

Large sites that use a Content Distribution Network occasionally have a misconfigured server that doesn't send the intermediate cert(s), so that also could be a factor.

more options

Hmm,

Firefox 57 has the same issue. After creating new profiles, the issue persists.

I'm gonna do some tests later. Thanks for your reply and your technical details.

more options
more options

@Pkshadow

Nope. You are referring to a knowledge base article, not a question.