1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
|
<!DOCTYPE html>
<!-- This Source Code Form is subject to the terms of the Mozilla Public
- License, v. 2.0. If a copy of the MPL was not distributed with this
- file, You can obtain one at http://mozilla.org/MPL/2.0/. -->
<html>
<head>
<meta
http-equiv="Content-Security-Policy"
content="connect-src https:; default-src chrome:; object-src 'none'"
/>
<meta name="referrer" content="no-referrer" />
<meta charset="UTF-8" />
<link
rel="stylesheet"
type="text/css"
href="chrome://global/skin/offlineSupportPages.css"
/>
<link
rel="icon"
type="image/png"
id="favicon"
href="chrome://branding/content/icon32.png"
/>
<title>How to troubleshoot time related errors on secure websites</title>
</head>
<body>
<div id="offlineSupportContainer">
<h1>How to troubleshoot time related errors on secure websites</h1>
<p>
Certificates for secure websites (the address begins with
<strong>https://</strong>) are valid only for a certain period of time.
If a website presents a certificate with validity dates that don't match
the date on your computer's clock, Firefox can't verify that it is
secure and will show you an error page.
</p>
<p>
Such issues can often be fixed by setting the correct date, time and
time zone on your computer system. If this does not solve the problem,
it could be caused by other issues, such as a misconfigured web server
or an expired certificate.
</p>
<div id="toc">
<h2>Table of Contents</h2>
<ul>
<li class="toclevel-1">
<a href="#w_list-of-time-related-error-codes-you-may-encounter">
<span class="tocnumber">1</span>
<span class="toctext"
>List of time-related error codes you may encounter</span
>
</a>
</li>
<li class="toclevel-1">
<a href="#w_set-your-system-clock-to-the-correct-time">
<span class="tocnumber">2</span>
<span class="toctext"
>Set your system clock to the correct time</span
>
</a>
</li>
<li class="toclevel-1">
<a href="#w_contact-the-website-owner">
<span class="tocnumber">3</span>
<span class="toctext">Contact the website owner</span>
</a>
</li>
<li class="toclevel-1">
<a href="#w_bypass-the-warning">
<span class="tocnumber">4</span>
<span class="toctext">Bypass the warning</span>
</a>
</li>
</ul>
</div>
<h1 id="w_list-of-time-related-error-codes-you-may-encounter">
List of time-related error codes you may encounter
</h1>
<div class="for" data-for="fx66">
<div class="note">
<strong>Note:</strong> A <em>Your Computer Clock is Wrong</em> error
page almost certainly means that your computer's clock is set to the
wrong date. Some time-related errors will show a
<em>Warning: Potential Security Risk Ahead</em> error page. For other
time-related errors, you'll get a <em>Secure Connection Failed</em> or
<em>Did Not Connect: Potential Security Issue</em> error page.
</div>
<p>
<span class="for" data-for="=fx66"></span>
<span class="for" data-for="fx67"></span>
</p>
<p>
Click
<span class="for" data-for="not fx67">
<span class="button">More Information</span> or
<span class="button">Advanced…</span>, depending on the error page,
</span>
<span class="for" data-for="fx67">
<span class="button">Advanced…</span> on the error page</span
>
to view the error code. One of the following error codes will indicate
that the secure connection couldn't be established due to a
time-related error:
</p>
</div>
<div class="for" data-for="not fx66">
<div class="note">
<strong>Note:</strong> If you get a
<em>Your connection is not secure</em> error page, click the
<span class="button">Advanced</span> button to view the error code and
other details. A <em>Secure Connection Failed</em> error page may also
indicate a time-related error.
</div>
<p>
One of the following error codes will indicate that the secure
connection couldn't be established due to a time-related error:
</p>
</div>
<p>
<sub>SEC_ERROR_EXPIRED_CERTIFICATE</sub><br />
<sub>SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE</sub><br />
<sub>SEC_ERROR_OCSP_FUTURE_RESPONSE</sub><br />
<sub>SEC_ERROR_OCSP_OLD_RESPONSE</sub><br />
<sub>MOZILLA_PKIX_ERROR_NOT_YET_VALID_CERTIFICATE</sub><br />
<sub>MOZILLA_PKIX_ERROR_NOT_YET_VALID_ISSUER_CERTIFICATE</sub>
</p>
<p>
The text on the error page will warn you when Firefox detects that your
system date and time is probably wrong and will also show the date and
time currently set in your system. If the clock settings are incorrect
you should set it to the right time<span class="for" data-for="win,mac">
as explained below</span
>. Even if the displayed time settings seem to be correct, you should
make sure that the time zone settings of your system match your current
location.
</p>
<h1 id="w_set-your-system-clock-to-the-correct-time">
Set your system clock to the correct time
</h1>
<p>
Time-related errors on secure websites caused by a skewed system clock
can be resolved by setting your correct date, time and time zone<span
class="for"
data-for="mac"
>:</span
><span class="for" data-for="win,linux">.</span>
<span class="for" data-for="win">
Change your date and time settings from the clock on the Windows
taskbar or follow these instructions:</span
>
</p>
<div class="for" data-for="win10">
<h2>If you are on Windows 10:</h2>
<ol>
<li>
Click the Windows Start button or press the Windows key<span
class="key"
></span
>.
</li>
<li>In the Start menu, select<span class="menu">Settings</span>.</li>
<li>
In Settings, select<span class="menu">Time & language</span>.
</li>
<li>
In the<span class="menu">Date & time</span> section you can
review the current date and time settings. To change your settings
click on <span class="button">Change</span> below
<span class="menu">Change date and time</span> or expand the
<span class="menu">Time zone</span> dropdown menu.
<div class="note">
If your system is set to manage the time and time zone
automatically, you cannot make manual changes.
</div>
</li>
<li>If you are done with your changes, close the Settings window.</li>
</ol>
</div>
<div class="for" data-for="mac">
<h2>If you are on Mac OS:</h2>
<ol>
<li>
Click the Apple menu and select
<span class="menu">System Preferences</span>.
</li>
<li>
In the System Preferences window, click on
<strong>Date & Time</strong>.
</li>
<li>
The panel that opens shows the current date and time settings. In
order to adjust them, disable
<span class="pref">Set date and time automatically</span>, manually
enter the date and time and click
<span class="button">Save</span> to confirm your changes.
</li>
<li>
In order to review your time zone settings, click on the
<strong>Time Zone</strong> tab. In order to adjust your time zone,
disable
<span class="pref"
>Set time zone automatically using current location</span
>, click onto your approximate location in the map and select the
city closest to you in the dropdown panel.
</li>
<li>
If you are done with your changes, close the Date & Time window.
</li>
</ol>
</div>
<div class="note">
<strong>Note:</strong> If the clock on your device constantly resets
after you power it off, this might indicate that the battery cell that
runs the real-time clock is getting low or is empty. Please consult your
manufacturer's manual on how to replace the CMOS battery.
</div>
<h1 id="w_contact-the-website-owner">Contact the website owner</h1>
<p>
If you get a time related error on a secure website and you have already
checked the correct settings of your system’s clock, please contact the
owner of the website which you can’t access and inform them of the
problem. The website owner might need to renew the expired certificate,
for example.
</p>
<div class="for" data-for="not fx66">
<h1 id="w_bypass-the-warning">Bypass the warning</h1>
<div class="warning">
<strong>Warning:</strong> You should never bypass the warning for a
legitimate major website or sites where financial transactions take
place – in this case an invalid certificate can indicate that your
connection is compromised by a third party.
</div>
<p>
If you see a <em>Your connection is not secure</em> warning page and
the website allows it, you can add an exception to be able to visit
the site, despite the fact that the certificate is not trusted by
default:
</p>
<ol>
<li>
On the warning page, click <span class="button">Advanced</span>.
</li>
<li>
Click <span class="button">Add Exception…</span>. The
<em>Add Security Exception</em> dialog will appear.
</li>
<li>
Read the text describing the problems with the website. You can
click <span class="button">View…</span>
to closer inspect the untrusted certificate.
</li>
<li>
Click <span class="button">Confirm Security Exception</span> if you
are sure you want to trust the site.
</li>
</ol>
</div>
</div>
</body>
</html>
|
