www-tandfonline-com.ezproxy.lib.uconn.edu:443 uses an invalid security certificate.The certificate is not trusted because the issuer certificate is unknown.The server might not be sending the appropriate intermediate certificates.An additional root certificate may need to be imported.
Errors with the connector grabbing the articles here:
(Also, please start new threads for new issues — the thread you posted to was from 2018. I've moved this to a new thread.)
If you're getting a red X for the PDF when saving from the article page, we'd want to see a Debug ID from Zotero (not the Zotero Connector) for the save attempt.
I think it must be something with the proxy settings and I have shared this with them. They don't think it is and won't let me talk to IT, and I'm just redirected back to the librarian. She continues to have me turn things off or post on this forum to get your help (but she said that she thinks you'll just say it is the proxy issue, which she doesn't think it is). I did share the link provided here (https://www.zotero.org/support/kb/incomplete_cert_chain). I also just ran one of the articles that didn't work through the SSL server test & it does seem to be related to a missing intermediate certificate and here is that diagnosis: https://www.ssllabs.com/ssltest/analyze.html?d=journals-sagepub-com.ezproxy.lib.uconn.edu. As they don't seem to believe me, can you verify (again) what you think the issue is?
If it is helpful, I'm sharing that she also had me turn off the proxy redirect settings in the Connector and instead in the app had me use a library link under advanced settings. Here is the breakdown:
Zotero Preferences, Advanced, Under "OpenURL," in the "Resolver:" box:
"Configure Our "Library Links" in Preferences. Zotero offers a Lookup tool to help you get to the full-text of articles for which you have only a citation in Zotero. Located near the top right of the Zotero client, it looks like a green arrow pointing to the right. The lookup drop-down menu includes Google Scholar and CrossRef by default, but you can add our library's full-text linking, too. This works just like the UCONN Full Text button in our library databases."
In Zotero Connector, uncheck Enable proxy redirection (she said: under "automatically redirect future requests" through our proxy server. Although it's counterintuitive, you don't want to do that!" https://guides.lib.uconn.edu/zotero/AddReferences
Beyond that, dstillman can confirm that again, but Zotero won't connect, i.e. download PDFs, through a broken SSL chain, so that really is the problem, yes. And since that's a problem in UConn's ezproxy Setup, it makes sense that things work for you on campus. Best advice I'd have is to find out who manages ezproxy at UConn and email them directly, leading not with Zotero but with the ssl analyzer
So I would like to do the security override described here but need a little help: https://www.zotero.org/support/kb/cert_override
I don't have a WebDAV server, so looking at the second bullet, I ran the command prompt provided: certutil -A -d $ZOTERO_PROFILE_PATH -n $CA_NICKNAME -t C -i $CA_CERT_FILE
But it yielded this: CertUtil: Unknown arg: -A
I ran certutil -? and none of the commands are single letters (A, D, etc). Can you provide help with another command? Perhaps this?
-addstore -- Add certificate to store
I had also tried the steps to copy the cert9.db, key4.db, and pkcs11.txt files from the Firefox profile directory to the Zotero profile directory, but that didn't do anything.
To be clear, a local fix here is not appropriate — anyone else at your university will have the same problem — but most likely you just copied over the files from a Firefox installation that had already been served the intermediate certificate from another site. As explained on the Incomplete Cert Chain, if another site serves the certificate properly, Firefox and Zotero will cache it. But it would still be broken in a new Firefox or Zotero profile, because the proxy server isn't serving it as it should be.