259 lines
11 KiB
HTML
259 lines
11 KiB
HTML
<!doctype html>
|
||
<!-- This Source Code Form is subject to the terms of the Mozilla Public
|
||
- License, v. 2.0. If a copy of the MPL was not distributed with this
|
||
- file, You can obtain one at http://mozilla.org/MPL/2.0/. -->
|
||
<html>
|
||
<head>
|
||
<meta
|
||
http-equiv="Content-Security-Policy"
|
||
content="default-src chrome:; object-src 'none';"
|
||
/>
|
||
<meta name="referrer" content="no-referrer" />
|
||
<meta charset="UTF-8" />
|
||
<link
|
||
rel="stylesheet"
|
||
type="text/css"
|
||
href="chrome://global/skin/offlineSupportPages.css"
|
||
/>
|
||
<link
|
||
rel="icon"
|
||
type="image/png"
|
||
id="favicon"
|
||
href="chrome://branding/content/icon32.png"
|
||
/>
|
||
<title>How to troubleshoot time related errors on secure websites</title>
|
||
</head>
|
||
<body>
|
||
<div id="offlineSupportContainer">
|
||
<h1>How to troubleshoot time related errors on secure websites</h1>
|
||
<p>
|
||
Certificates for secure websites (the address begins with
|
||
<strong>https://</strong>) are valid only for a certain period of time.
|
||
If a website presents a certificate with validity dates that don't match
|
||
the date on your computer's clock, Firefox can't verify that it is
|
||
secure and will show you an error page.
|
||
</p>
|
||
<p>
|
||
Such issues can often be fixed by setting the correct date, time and
|
||
time zone on your computer system. If this does not solve the problem,
|
||
it could be caused by other issues, such as a misconfigured web server
|
||
or an expired certificate.
|
||
</p>
|
||
<div id="toc">
|
||
<h2>Table of Contents</h2>
|
||
<ul>
|
||
<li class="toclevel-1">
|
||
<a href="#w_list-of-time-related-error-codes-you-may-encounter">
|
||
<span class="tocnumber">1</span>
|
||
<span class="toctext"
|
||
>List of time-related error codes you may encounter</span
|
||
>
|
||
</a>
|
||
</li>
|
||
<li class="toclevel-1">
|
||
<a href="#w_set-your-system-clock-to-the-correct-time">
|
||
<span class="tocnumber">2</span>
|
||
<span class="toctext"
|
||
>Set your system clock to the correct time</span
|
||
>
|
||
</a>
|
||
</li>
|
||
<li class="toclevel-1">
|
||
<a href="#w_contact-the-website-owner">
|
||
<span class="tocnumber">3</span>
|
||
<span class="toctext">Contact the website owner</span>
|
||
</a>
|
||
</li>
|
||
<li class="toclevel-1">
|
||
<a href="#w_bypass-the-warning">
|
||
<span class="tocnumber">4</span>
|
||
<span class="toctext">Bypass the warning</span>
|
||
</a>
|
||
</li>
|
||
</ul>
|
||
</div>
|
||
<h1 id="w_list-of-time-related-error-codes-you-may-encounter">
|
||
List of time-related error codes you may encounter
|
||
</h1>
|
||
<div class="for" data-for="fx66">
|
||
<div class="note">
|
||
<strong>Note:</strong> A <em>Your Computer Clock is Wrong</em> error
|
||
page almost certainly means that your computer's clock is set to the
|
||
wrong date. Some time-related errors will show a
|
||
<em>Warning: Potential Security Risk Ahead</em> error page. For other
|
||
time-related errors, you'll get a <em>Secure Connection Failed</em> or
|
||
<em>Did Not Connect: Potential Security Issue</em> error page.
|
||
</div>
|
||
<p>
|
||
<span class="for" data-for="=fx66"></span>
|
||
<span class="for" data-for="fx67"></span>
|
||
</p>
|
||
<p>
|
||
Click
|
||
<span class="for" data-for="not fx67">
|
||
<span class="button">More Information</span> or
|
||
<span class="button">Advanced…</span>, depending on the error page,
|
||
</span>
|
||
<span class="for" data-for="fx67">
|
||
<span class="button">Advanced…</span> on the error page</span
|
||
>
|
||
to view the error code. One of the following error codes will indicate
|
||
that the secure connection couldn't be established due to a
|
||
time-related error:
|
||
</p>
|
||
</div>
|
||
<div class="for" data-for="not fx66">
|
||
<div class="note">
|
||
<strong>Note:</strong> If you get a
|
||
<em>Your connection is not secure</em> error page, click the
|
||
<span class="button">Advanced</span> button to view the error code and
|
||
other details. A <em>Secure Connection Failed</em> error page may also
|
||
indicate a time-related error.
|
||
</div>
|
||
<p>
|
||
One of the following error codes will indicate that the secure
|
||
connection couldn't be established due to a time-related error:
|
||
</p>
|
||
</div>
|
||
<p>
|
||
<sub>SEC_ERROR_EXPIRED_CERTIFICATE</sub><br />
|
||
<sub>SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE</sub><br />
|
||
<sub>SEC_ERROR_OCSP_FUTURE_RESPONSE</sub><br />
|
||
<sub>SEC_ERROR_OCSP_OLD_RESPONSE</sub><br />
|
||
<sub>MOZILLA_PKIX_ERROR_NOT_YET_VALID_CERTIFICATE</sub><br />
|
||
<sub>MOZILLA_PKIX_ERROR_NOT_YET_VALID_ISSUER_CERTIFICATE</sub>
|
||
</p>
|
||
<p>
|
||
The text on the error page will warn you when Firefox detects that your
|
||
system date and time is probably wrong and will also show the date and
|
||
time currently set in your system. If the clock settings are incorrect
|
||
you should set it to the right time<span class="for" data-for="win,mac">
|
||
as explained below</span
|
||
>. Even if the displayed time settings seem to be correct, you should
|
||
make sure that the time zone settings of your system match your current
|
||
location.
|
||
</p>
|
||
<h1 id="w_set-your-system-clock-to-the-correct-time">
|
||
Set your system clock to the correct time
|
||
</h1>
|
||
<p>
|
||
Time-related errors on secure websites caused by a skewed system clock
|
||
can be resolved by setting your correct date, time and time zone<span
|
||
class="for"
|
||
data-for="mac"
|
||
>:</span
|
||
><span class="for" data-for="win,linux">.</span>
|
||
<span class="for" data-for="win">
|
||
Change your date and time settings from the clock on the Windows
|
||
taskbar or follow these instructions:</span
|
||
>
|
||
</p>
|
||
<div class="for" data-for="win10">
|
||
<h2>If you are on Windows 10:</h2>
|
||
<ol>
|
||
<li>
|
||
Click the Windows Start button or press the Windows key<span
|
||
class="key"
|
||
></span
|
||
>.
|
||
</li>
|
||
<li>In the Start menu, select<span class="menu">Settings</span>.</li>
|
||
<li>
|
||
In Settings, select<span class="menu">Time & language</span>.
|
||
</li>
|
||
<li>
|
||
In the<span class="menu">Date & time</span> section you can
|
||
review the current date and time settings. To change your settings
|
||
click on <span class="button">Change</span> below
|
||
<span class="menu">Change date and time</span> or expand the
|
||
<span class="menu">Time zone</span> dropdown menu.
|
||
<div class="note">
|
||
If your system is set to manage the time and time zone
|
||
automatically, you cannot make manual changes.
|
||
</div>
|
||
</li>
|
||
<li>If you are done with your changes, close the Settings window.</li>
|
||
</ol>
|
||
</div>
|
||
<div class="for" data-for="mac">
|
||
<h2>If you are on Mac OS:</h2>
|
||
<ol>
|
||
<li>
|
||
Click the Apple menu and select
|
||
<span class="menu">System Preferences</span>.
|
||
</li>
|
||
<li>
|
||
In the System Preferences window, click on
|
||
<strong>Date & Time</strong>.
|
||
</li>
|
||
<li>
|
||
The panel that opens shows the current date and time settings. In
|
||
order to adjust them, disable
|
||
<span class="pref">Set date and time automatically</span>, manually
|
||
enter the date and time and click
|
||
<span class="button">Save</span> to confirm your changes.
|
||
</li>
|
||
<li>
|
||
In order to review your time zone settings, click on the
|
||
<strong>Time Zone</strong> tab. In order to adjust your time zone,
|
||
disable
|
||
<span class="pref"
|
||
>Set time zone automatically using current location</span
|
||
>, click onto your approximate location in the map and select the
|
||
city closest to you in the dropdown panel.
|
||
</li>
|
||
<li>
|
||
If you are done with your changes, close the Date & Time window.
|
||
</li>
|
||
</ol>
|
||
</div>
|
||
<div class="note">
|
||
<strong>Note:</strong> If the clock on your device constantly resets
|
||
after you power it off, this might indicate that the battery cell that
|
||
runs the real-time clock is getting low or is empty. Please consult your
|
||
manufacturer's manual on how to replace the CMOS battery.
|
||
</div>
|
||
<h1 id="w_contact-the-website-owner">Contact the website owner</h1>
|
||
<p>
|
||
If you get a time related error on a secure website and you have already
|
||
checked the correct settings of your system’s clock, please contact the
|
||
owner of the website which you can’t access and inform them of the
|
||
problem. The website owner might need to renew the expired certificate,
|
||
for example.
|
||
</p>
|
||
<div class="for" data-for="not fx66">
|
||
<h1 id="w_bypass-the-warning">Bypass the warning</h1>
|
||
<div class="warning">
|
||
<strong>Warning:</strong> You should never bypass the warning for a
|
||
legitimate major website or sites where financial transactions take
|
||
place – in this case an invalid certificate can indicate that your
|
||
connection is compromised by a third party.
|
||
</div>
|
||
<p>
|
||
If you see a <em>Your connection is not secure</em> warning page and
|
||
the website allows it, you can add an exception to be able to visit
|
||
the site, despite the fact that the certificate is not trusted by
|
||
default:
|
||
</p>
|
||
<ol>
|
||
<li>
|
||
On the warning page, click <span class="button">Advanced</span>.
|
||
</li>
|
||
<li>
|
||
Click <span class="button">Add Exception…</span>. The
|
||
<em>Add Security Exception</em> dialog will appear.
|
||
</li>
|
||
<li>
|
||
Read the text describing the problems with the website. You can
|
||
click <span class="button">View…</span>
|
||
to closer inspect the untrusted certificate.
|
||
</li>
|
||
<li>
|
||
Click <span class="button">Confirm Security Exception</span> if you
|
||
are sure you want to trust the site.
|
||
</li>
|
||
</ol>
|
||
</div>
|
||
</div>
|
||
</body>
|
||
</html>
|