1523691 - SEC_ERROR_UNKNOWN_ISSUER on all Domains, build 20190124174741

Status: RESOLVED DUPLICATE of bug 1523701

(Core :: Security: PSM, defect)

Description

[spencer_tupis]

Attachment: Firefox-version_65.0-build_20190124174741-Troubleshooting_Information.json

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36

Steps to reproduce:

I had several tabs open and went to "About Firefox" to update to version 65. After waiting to download to update, it was installed and I allowed the browser to restart.

Actual results:

Upon navigating to any website, I receive the message:

"Your connection is not secure

The owner of [ARBITRARY DOMAIN HERE] has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website."

The "Advanced" button shows:

"[ARBITRARY DOMAIN HERE] uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown.
The server might not be sending the appropriate intermediate certificates.
An additional root certificate may need to be imported.

Error code: SEC_ERROR_UNKNOWN_ISSUER"

Expected results:

The website should load normally. (I tried https://google.com/ and https://lobste.rs/).

Comment 1

[Gingerbread Man]

This is caused by your security software having an "HTTPS scanning" feature enabled, but not having its certificate in Firefox's trust store. The support article recommends reinstalling the software.

https://support.mozilla.org/kb/error-codes-secure-websites

Comment 2

[Romain Testard [:RT]]

Can you please confirm if you are using an anti virus? Which one is it? (product name and version, SSL scanning enabled?)
Also can you please confirm if doing the following fixes the issue:
1 get to about:config in the URL bar
2 Lookup security.enterprise_roots.enabled and set it to true
3 reload the broken website

Comment 3

[Ryan VanderMeulen [:RyanVM]]

Probably a dupe of bug 1523701.