<!
doctype html>
<!-- This Source Code Form is subject to the terms of the Mozilla Public
- License, v. 2.0. If a copy of the MPL was not distributed with this
- file, You can obtain one at http://mozilla.org/MPL/2.0/. -->
<
html>
<
head>
<
meta
http-equiv=
"Content-Security-Policy"
content=
"connect-src https:; default-src chrome:; object-src 'none'"
/>
<
meta name=
"referrer" content=
"no-referrer" />
<
meta charset=
"UTF-8" />
<
link
rel=
"stylesheet"
type=
"text/css"
href=
"chrome://global/skin/offlineSupportPages.css"
/>
<
link
rel=
"icon"
type=
"image/png"
id=
"favicon"
href=
"chrome://branding/content/icon32.png"
/>
<
title>How to troubleshoot
time related errors on secure websites</
title>
</
head>
<
body>
<
div id=
"offlineSupportContainer">
<
h1>How to troubleshoot
time related errors on secure websites</
h1>
<p>
Certificates for secure websites (the
address begins with
<
strong>
https://</strong>) are valid only for a certain period of
time.
If a website presents a certificate with validity dates that don
't match
the date on your computer
's clock, Firefox can't verify that it is
secure and will show you an error page.
</p>
<p>
Such issues can often be fixed by setting the correct date,
time and
time zone on your computer system. If this does not solve the problem,
it could be caused by other issues, such as a misconfigured web server
or an expired certificate.
</p>
<
div id=
"toc">
<h2>
Table of Contents</h2>
<
ul>
<
li class=
"toclevel-1">
<a href=
"#w_list-of-time-related-error-codes-you-may-encounter">
<
span class=
"tocnumber">1</
span>
<
span class=
"toctext"
>List of time-related error codes you may encounter</
span
>
</a>
</
li>
<
li class=
"toclevel-1">
<a href=
"#w_set-your-system-clock-to-the-correct-time">
<
span class=
"tocnumber">2</
span>
<
span class=
"toctext"
>Set your system clock to the correct
time</
span
>
</a>
</
li>
<
li class=
"toclevel-1">
<a href=
"#w_contact-the-website-owner">
<
span class=
"tocnumber">3</
span>
<
span class=
"toctext">Contact the website owner</
span>
</a>
</
li>
<
li class=
"toclevel-1">
<a href=
"#w_bypass-the-warning">
<
span class=
"tocnumber">4</
span>
<
span class=
"toctext">Bypass the warning</
span>
</a>
</
li>
</
ul>
</
div>
<
h1 id=
"w_list-of-time-related-error-codes-you-may-encounter">
List of time-related error codes you may encounter
</
h1>
<
div class=
"for" data-for=
"fx66">
<
div class=
"note">
<
strong>Note:</
strong> A <
em>Your Computer Clock is Wrong</
em> error
page almost certainly means that your computer
's clock is set to the
wrong date. Some time-related errors will show a
<
em>Warning: Potential Security Risk Ahead</
em> error page. For other
time-related errors, you
'll get a Secure Connection Failed or
<
em>Did Not Connect: Potential Security Issue</
em> error page.
</
div>
<p>
<
span class=
"for" data-for=
"=fx66"></
span>
<
span class=
"for" data-for=
"fx67"></
span>
</p>
<p>
Click
<
span class=
"for" data-for=
"not fx67">
<
span class=
"button">More Information</
span> or
<
span class=
"button">Advanced…</
span>, depending on the error page,
</
span>
<
span class=
"for" data-for=
"fx67">
<
span class=
"button">Advanced…</
span> on the error page</
span
>
to view the error
code. One of the following error codes will indicate
that the secure connection couldn
't be established due to a
time-related error:
</p>
</
div>
<
div class=
"for" data-for=
"not fx66">
<
div class=
"note">
<
strong>Note:</
strong> If you get a
<
em>Your connection is not secure</
em> error page, click the
<
span class=
"button">Advanced</
span>
button to view the error
code and
other
details. A <
em>Secure Connection Failed</
em> error page may also
indicate a time-related error.
</
div>
<p>
One of the following error codes will indicate that the secure
connection couldn
't be established due to a time-related error:
</p>
</
div>
<p>
<
sub>SEC_ERROR_EXPIRED_CERTIFICATE</
sub><
br />
<
sub>SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE</
sub><
br />
<
sub>SEC_ERROR_OCSP_FUTURE_RESPONSE</
sub><
br />
<
sub>SEC_ERROR_OCSP_OLD_RESPONSE</
sub><
br />
<
sub>MOZILLA_PKIX_ERROR_NOT_YET_VALID_CERTIFICATE</
sub><
br />
<
sub>MOZILLA_PKIX_ERROR_NOT_YET_VALID_ISSUER_CERTIFICATE</
sub>
</p>
<p>
The text on the error page will warn you when Firefox detects that your
system date and
time is probably wrong and will also show the date and
time currently set in your system. If the clock settings are incorrect
you should set it to the right
time<
span class=
"for" data-for=
"win,mac">
as explained below</
span
>. Even if the displayed
time settings seem to be correct, you should
make sure that the
time zone settings of your system match your current
location.
</p>
<
h1 id=
"w_set-your-system-clock-to-the-correct-time">
Set your system clock to the correct
time
</
h1>
<p>
Time-related errors on secure websites caused by a skewed system clock
can be resolved by setting your correct date,
time and
time zone<
span
class=
"for"
data-for=
"mac"
>:</
span
><
span class=
"for" data-for=
"win,linux">.</
span>
<
span class=
"for" data-for=
"win">
Change your date and
time settings from the clock on the Windows
taskbar or follow these instructions:</
span
>
</p>
<
div class=
"for" data-for=
"win10">
<h2>If you are on Windows 10:</h2>
<
ol>
<
li>
Click the Windows Start
button or press the Windows key<
span
class=
"key"
></
span
>.
</
li>
<
li>In the Start
menu,
select<
span class=
"menu">Settings</
span>.</
li>
<
li>
In Settings,
select<
span class=
"menu">
Time & language</
span>.
</
li>
<
li>
In the<
span class=
"menu">Date &
time</
span>
section you can
review the current date and
time settings. To change your settings
click on <
span class=
"button">Change</
span> below
<
span class=
"menu">Change date and
time</
span> or expand the
<
span class=
"menu">
Time zone</
span> dropdown
menu.
<
div class=
"note">
If your system is set to manage the
time and
time zone
automatically, you cannot make manual changes.
</
div>
</
li>
<
li>If you are done with your changes, close the Settings window.</
li>
</
ol>
</
div>
<
div class=
"for" data-for=
"mac">
<h2>If you are on Mac OS:</h2>
<
ol>
<
li>
Click the Apple
menu and
select
<
span class=
"menu">System Preferences</
span>.
</
li>
<
li>
In the System Preferences window, click on
<
strong>Date &
Time</
strong>.
</
li>
<
li>
The panel that opens shows the current date and
time settings. In
order to adjust them, disable
<
span class=
"pref">Set date and
time automatically</
span>, manually
enter the date and
time and click
<
span class=
"button">Save</
span> to confirm your changes.
</
li>
<
li>
In order to review your
time zone settings, click on the
<
strong>
Time Zone</
strong> tab. In order to adjust your
time zone,
disable
<
span class=
"pref"
>Set
time zone automatically using current location</
span
>, click onto your approximate location in the
map and
select the
city closest to you in the dropdown panel.
</
li>
<
li>
If you are done with your changes, close the Date &
Time window.
</
li>
</
ol>
</
div>
<
div class=
"note">
<
strong>Note:</
strong> If the clock on your device constantly resets
after you power it off, this might indicate that the battery cell that
runs the real-time clock is getting low or is empty. Please consult your
manufacturer
's manual on how to replace the CMOS battery.
</
div>
<
h1 id=
"w_contact-the-website-owner">Contact the website owner</
h1>
<p>
If you get a
time related error on a secure website and you have already
checked the correct settings of your system’s clock, please contact the
owner of the website which you can’t access and inform them of the
problem. The website owner might need to renew the expired certificate,
for example.
</p>
<
div class=
"for" data-for=
"not fx66">
<
h1 id=
"w_bypass-the-warning">Bypass the warning</
h1>
<
div class=
"warning">
<
strong>Warning:</
strong> You should never bypass the warning for a
legitimate major website or sites where financial transactions take
place – in this case an invalid certificate can indicate that your
connection is compromised by a third party.
</
div>
<p>
If you see a <
em>Your connection is not secure</
em> warning page and
the website allows it, you can add an exception to be able to visit
the site, despite the fact that the certificate is not trusted by
default:
</p>
<
ol>
<
li>
On the warning page, click <
span class=
"button">Advanced</
span>.
</
li>
<
li>
Click <
span class=
"button">Add Exception…</
span>. The
<
em>Add Security Exception</
em>
dialog will appear.
</
li>
<
li>
Read the text describing the problems with the website. You can
click <
span class=
"button">View…</
span>
to closer inspect the untrusted certificate.
</
li>
<
li>
Click <
span class=
"button">Confirm Security Exception</
span> if you
are sure you want to trust the site.
</
li>
</
ol>
</
div>
</
div>
</
body>
</
html>
