2

My organization have emitted TLS certificate for Https. It appears as secure when I access the page with Chrome but non secure with FireFox.

Is there a difference between these two browsers about how they validate TLS certificate? Why FireFox is not validating this certificate?

This print screen is from Firefox enter image description here

Improve this question
3

Yes, there is a difference. On Windows, Google Chrome uses a built-in Windows Certificate Store when identifying the trust. Mozilla uses its own trust certificate store. Apparently, your internal CA is installed on Windows, but not in Firefox browser. You have to install your private root CA certificate into Firefox browser.

Improve this answer
5
  • What about external users coming to the webpage? – Below the Radar Jun 5 '19 at 20:01
  • 1
    They will have to install your root CA certificate as well, because your CA is not globally trusted. Alternatively, you may consider to get a certificate from a globally trusted CA. This is recommended approach if you have external clients. – Crypt32 Jun 5 '19 at 20:05
  • See letsencrypt.org for a free solution – olidem Jun 5 '19 at 23:14
  • Thank you for the info! – Below the Radar Jun 6 '19 at 12:30
  • Alternately (and better, IMO): Tell Firefox to use the Windows certificate store. – Bill_Stewart Jun 16 '19 at 18:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.