Unable to install addins

Add-ons addons.mozilla.org
#1

I am getting error www.mozilla.org uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER

Peer’s Certificate issuer is not recognized.

HTTP Strict Transport Security: false
HTTP Public Key Pinning: false

Certificate chain:

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

#2

Thanks for the encoded certificates. So the “fake” website cert was issued by:

“Forcepoint Cloud Web Enforcer CA”

Does that sound like some security filter that limits what you can do on the web? If you want to trust all of its fake certs, you can import the signing certificate. I’m not sure if this is readily available on your system or from your administrator or from the vendor, or whether you’ll need to extract it using IE or another browser. As a temporary workaround, you could try this and see whether it helps:

(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful or accepting the risk.

(2) In the search box above the list, type or paste roots and pause while the list is filtered

(3) Double-click the security.enterprise_roots.enabled preference to switch the value from false to true

Now Firefox should trust the certificates in the system certificate store. On the downside, that means if your system is attacked and a fake authority is added there, Firefox is no longer insulated from that.

#3

Thanks for your solution. It works. :relieved: