Not trusted certificate

[JoanT]

We're using JIRA OnDemand on our organization. Lately we're getting the SSL error message when trying to reach our domain: https://fogaiba.atlassian.net

When using Firefox we got a sec_error_untrusted_issuer and no option of adding an exception.

When using Chrome we got an untrusted site security cert, but we can go on. But the identity of the site keeps being untrusted.

How can we solve this? Any ideas?

[Michael Knight]

The first thing to do is verify that the certificate you're receiving is actually the right one. Here are the details I get: http://i.imgur.com/NU6mBPP.png (I get no untrusted warnings).

If the certificate you get is different, this could indicate you are the victims of some kind of man-in-the-middle attack and you should follow this up with your security people.

If the certificate is the same, then you most likely need to update the certificate store on your operating system. For example, in MS Windows this is usually done by applying an optional "Windows Root Certificates" Windows update. There's a more detailed explanation about this here.