Palo Alto Networks Knowledgebase: After Configuring SSL Decryption Mozilla Firefox Presents Certificate Error

After Configuring SSL Decryption Mozilla Firefox Presents Certificate Error

0
Created On 10/19/18 15:27 PM - Last Updated 10/22/18 23:16 PM
Resolution

Issue

After configuring SSL decryption Mozilla Firefox shows certificate error:

Error: (Error code: sec_error_untrusted_issuer)

See the image below for an example of this error message:

firefoxCertError.JPG

Cause

This occurs because Mozilla Firefox uses different certificate repositories than other browsers such as Internet Explorer (IE) and Google Chrome.

Resolution

To resolve the certificate error, import the root certificate used for the SSL decryption to the following location: Mozilla > Options > View Certificates > Authorities and click on Import. This will import the root certificate used for the SSL decryption, as shown below:

Mozilla_Error.png

Once the certificate has been imported verify the 'Edit trust settings'. Make sure the following options have been selected:

Go to Options > Advanced > Certificates > View Certificates and select the certificate that was imported and select 'Edit Trust'.

In the example below, the certificate selected is 172.16.105.1:

Firefoxcertediting.JPG

owner: hshah



 Attachments
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGCCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments