Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
kb:ssl_certificate_error [2018/06/20 11:30] – dstillmankb:ssl_certificate_error [2024/09/27 16:17] (current) – dstillman
Line 1: Line 1:
-=== "SSL certificate error connecting to [domain]" ===+=== "[domain] uses an invalid security certificate." ===
  
 The above or a similar message generally indicates that something on your computer or network is intercepting and possibly monitoring your connection to the internet. The above or a similar message generally indicates that something on your computer or network is intercepting and possibly monitoring your connection to the internet.
Line 7: Line 7:
 Try the following steps to debug the problem: Try the following steps to debug the problem:
  
-  - Restart Zotero and/or your computer and try syncing again. This error can be caused by intermittent network issues.+  - Restart Zotero and/or your computer and try again. This error can be caused by intermittent network issues.
   - Make sure your system clock and time zone are set correctly.   - Make sure your system clock and time zone are set correctly.
-  - If you get the same error after restarting, Zotero's network connection may be getting intercepted, possibly due to a proxy server on your network or security software or malware on your computer. View the [[site_certificate_info|certificate information]] for the affected domain in your browser, which may show you what is intercepting your connections. +  - If you get the same error after restarting, Zotero's network connection is likely getting intercepted, possibly due to a proxy server on your network or security software or malware on your computer. View the [[site_certificate_info|certificate information]] for the affected domain in your browser, which may show you what is intercepting your connections. 
-    - If your browser shows expected values (e.g., “GeoTrust Inc.”, “RapidSSL”, or "Amazon", for zotero.org), Zotero's network connection may be [[:kb/connection_error|configured differently]] from your browser's. +    - If your browser shows the affected domain as validated by an expected entity (e.g., "Amazon" for zotero.org), Zotero's network connection may be [[:kb/connection_error|configured differently]] from your browser's. 
-    - If your browser shows the affected domain as verified by something else and you recognize the listed entity (e.g., the name of security software or your institution), take appropriate action. If you don't recognize it, try the following steps:+    - If your browser shows the affected domain as verified by something else and you recognize the listed entity (e.g., the name of security software or your institution), take appropriate action: 
 +      * If you see security software listed, disable it, or disable its SSL/TLS/HTTPS-scanning feature. 
 +      * If you see your institution listed, your IT department is likely intercepting your traffic and has installed a certificate for a "custom certificate authority" in your browser to avoid security errors resulting from the interception. Depending on how your system is configured, Zotero may not trust the same custom certificate by default, in which case it will properly warning you of the intercepted connection. You can try following the [[cert_override|certificate override]] instructions for Zotero, but be aware that your connection to Zotero servers is being monitored by your institution. 
 +    - If you don't recognize the listed entity:
       * Check your system for malware.       * Check your system for malware.
-      * If you're using security software, try temporarily disabling it, or disable its SSL/TLS/HTTPS-scanning feature. +      * If you're using any security software, try temporarily disabling it. 
-      * If you're using a laptop, try syncing from a different network. +      * If you're in an institutional environment, ask your IT department if they have installed a "custom certificate authority" in your browser. If so, you can try following the [[cert_override|certificate override]] instructions for Zotero, but be aware that your connection to Zotero servers is being monitored by your institution. 
-      * If you're in an institutional environment, ask your network administrator if they have installed a "custom root certificate" in your browser. If so, you can try following the [[cert_override|certificate override]] instructions for Zotero, but be aware that your connection to Zotero is being monitored by your institution.+      * If you're using a laptop, try from a different network.
       * In rare circumstances, reinstalling Zotero may help.       * In rare circumstances, reinstalling Zotero may help.
  
-{{tag>kb sync}}+{{tag>kb}}
kb/ssl_certificate_error.1529508623.txt.gz · Last modified: 2018/06/20 11:30 by dstillman