Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Why am I getting sec_error_unknown_issuer in Firefox?

Posted on 2009-04-27
4
Medium Priority
?
6,679 Views
Last Modified: 2013-12-07
We are getting a sec_error_unknown_issuer on ONE machine in the building using Firefox trying to get to https://www.dmv.virginia.gov/dmvnet/extra/securid/whatcanido.asp.  This machine is using Firefox 3.0.9.  Other machines using 3.0.9 do not have this trouble.

Where to begin?  What's going on?
0
Comment
Question by:mrcoulson
  • 2
  • 2
4 Comments
 

Author Comment

by:mrcoulson
ID: 24245277
Okay.  I just installed 3.0.9 on another machine and this is happening there, too.  Hmmm.  But it's still only some machines.

Jeremy
0
 
LVL 35

Accepted Solution

by:
torimar earned 2000 total points
ID: 24246763
If you go to this address: http://www.sslshopper.com/ssl-checker.html
and input "www.dmv.virginia.gov", then let it check the SSL, you see that the "certificate will not be trusted in all web browsers".

This is true, because I tested it in Opera and it works fine. Why only a few Firefox machines at your place are affected, I cannot tell, my Firefox didn't like the certificate either. I assume it could have something to do with already having the certificate chain installed from earlier, versus going there first time.
Maybe the server admin reinstalled/renewed the certificate and did not do it correctly?

Anyway, here's the remedy:
Go to Entrust's root certificate download page: https://www.entrust.net/downloads/root_index.cfm
on the Download page, scroll down to the last certificate (Entrust L1B Chain Certificate), right-click it and select "Save target as...".

In Firefox, open Tools > Options > Advanced > Encryption > Show Certificates
Select the tab "Certification Authorities" (last but one), click "Import" and point it to the .cer file you just downloaded from Entrust. Click 'Ok' a couple of times and restart Firefox.

That solved the issue for me.
0
 
LVL 35

Expert Comment

by:torimar
ID: 24246767
ps:
When importing the certificate, make sure to place a checkmark in for the kind of certification you wish (websites for sure, maybe email, too?)
0
 

Author Closing Comment

by:mrcoulson
ID: 31575156
Bingo!  And thanks for the resource in sslshopper.com.

Jeremy
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I annotated my article on ransomware somewhat extensively, but I keep adding new references and wanted to put a link to the reference library.  Despite all the reference tools I have on hand, it was not easy to find a way to do this easily. I finall…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question