When connecting to a resource with SSL, I know that the certificates can be validated by the client to make sure the connection is secure.
I recently run into SSL problems at work, when connected to my company's network (only when using specific WLAN endpoint). I did not face any issues when using the web browser, but when I made connections with curl or java I got errors like "SSL certificate problem: self signed certificate in certificate chain" or "PKIX path building failed; unable to find valid certification path to requested target”. I had a look at the certificate chain in the browser and saw that the entire certificate chain of the website was replaced with certificates of my company. However, this was only the case for certain websites, other websites like google or amazon were still loaded with the correct certificates.
So now I have a couple of questions for you. How is it possible to change all the certificates? Why does my browser not complain about this? Does someone know why this is happening only for specific websites? I work at a very large company and I still haven't found the right person to talk to about this.