| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| kb:ssl_certificate_error [2017/11/12 19:53] – external edit 127.0.0.1 | kb:ssl_certificate_error [2024/03/29 06:33] (current) – dstillman |
|---|
| <html><p id="zotero-5-update-warning" style="color: red; font-weight: bold">We’re | === "[domain] uses an invalid security certificate." === |
| in the process of updating the documentation for | |
| <a href="https://www.zotero.org/blog/zotero-5-0">Zotero 5.0</a>. Some documentation | |
| may be outdated in the meantime. Thanks for your understanding.</p></html> | |
| |
| | The above or a similar message generally indicates that something on your computer or network is intercepting and possibly monitoring your connection to the internet. |
| |
| === "SSL certificate error connecting to api.zotero.org" === | (If you're getting a certificate error for a proxy or WebDAV URL, that's likely [[incomplete_cert_chain|a different issue]].) |
| | |
| The above or a similar message generally indicates that something on your computer or network is intercepting and possibly monitoring your connection to the Zotero servers. The Zotero SSL certificates should always be valid. | |
| | |
| (If you're getting a certificate error for a proxy or WebDAV URL, that's [[incomplete_cert_chain|a different issue]].) | |
| |
| Try the following steps to debug the problem: | Try the following steps to debug the problem: |
| |
| - Restart Zotero and/or your computer and try syncing again. This error can be caused by intermittent network issues. | - Restart Zotero and/or your computer and try again. This error can be caused by intermittent network issues. |
| - Make sure your system clock and time zone are set correctly. | - Make sure your system clock and time zone are set correctly. |
| - If you get the same error after restarting, load https://api.zotero.org (or the URL from your error message, being sure to use 'https', not 'http') in your browser (e.g., Firefox, Chrome, Safari). | - If you get the same error after restarting, Zotero's network connection is likely getting intercepted, possibly due to a proxy server on your network or security software or malware on your computer. View the [[site_certificate_info|certificate information]] for the affected domain in your browser, which may show you what is intercepting your connections. |
| * If you see the message "Nothing to see here", continue to Step 4. | - If your browser shows the affected domain as validated by an expected entity (e.g., "Amazon" for zotero.org), Zotero's network connection may be [[:kb/connection_error|configured differently]] from your browser's. |
| * If your browser displays an SSL certificate warning, someone or something may be intercepting your web traffic. **Do not whitelist the certificate**, as zotero.org's certificate should not be invalid and you will no longer have any guarantee that your connection to zotero.org is secure. (Whitelisting the certificate in your browser will also have no effect on Zotero.) Talk to your network administrator or ISP. | - If your browser shows the affected domain as verified by something else and you recognize the listed entity (e.g., the name of security software or your institution), take appropriate action: |
| - If you see the message "Nothing to see here" after loading the URL in your browser but continue to get SSL certificate errors in Zotero, your sync requests may be getting intercepted, possibly due to malware or security software on your system or a proxy server on your network. The following steps may help you debug or fix the problem: | * If you see security software listed, disable it, or disable its SSL/TLS/HTTPS-scanning feature. |
| * View the [[site_certificate_info|certificate information]] for zotero.org or the URL in question, which may show what is intercepting your connections. | * If you see your institution listed, your IT department is likely intercepting your traffic and has installed a certificate for a "custom certificate authority" in your browser to avoid security errors resulting from the interception. Since Zotero won't trust the same custom certificate by default, it is properly warning you of the intercepted connection. You can try following the [[cert_override|certificate override]] instructions for Zotero, but be aware that your connection to Zotero servers is being monitored by your institution. |
| * Check your system for malware. | - If you don't recognize the listed entity: |
| * If you are using security software, try temporarily disabling it, or disable its SSL/TLS/HTTPS-scanning feature. | * Check your system for malware. |
| * If you are using a laptop, try syncing from a different network. | * If you're using any security software, try temporarily disabling it. |
| * If you are in an institutional environment, ask your network administrator if they have installed a "custom root certificate" in your browser. If so, you can try following the [[cert_override|certificate override]] instructions for Zotero, but be aware that your connection to Zotero is being intercepted and possibly monitored. | * If you're in an institutional environment, ask your IT department if they have installed a "custom certificate authority" in your browser. If so, you can try following the [[cert_override|certificate override]] instructions for Zotero, but be aware that your connection to Zotero servers is being monitored by your institution. |
| * In rare circumstances, reinstalling Zotero may help. | * If you're using a laptop, try from a different network. |
| | * In rare circumstances, reinstalling Zotero may help. |
| |
| {{tag>kb sync}} | {{tag>kb}} |
Upgrade Storage