Fail to sync with InifiniCloud WebDAV - intermediate certificate issue
[Admin Note: Fixed in Zotero 7.]
I've been using Zotero with syncing through WebDAV (InifiniCloud) for several months, and everything has been working great. However, the last successful sync between my iPad and Windows PC was about 72 hours ago, and certificate issue as below has suddenly occurred.
https://s3.amazonaws.com/zotero.org/images/forums/u14294938/vklcys47xs79eh65ux5u.jpg
I've refer to several post and the closest error as what I'm facing is from this Documentation.
https://www.zotero.org/support/kb/incomplete_cert_chain
According to the documentation, intermediate certificates might seeing “Chain issues: Incomplete” in orange under “Additional Certificates (if supplied)” when verify through SSL Labs server test, however when I check through the test, my domain doesn't shows error in Chain issues.
Instead, I'm seeing it has a CRL ERROR: IOException occurred as shown below.
https://s3.amazonaws.com/zotero.org/images/forums/u14294938/1ce4hhuyypkzz8b4j1h0.png
https://s3.amazonaws.com/zotero.org/images/forums/u14294938/qjzxe44j5mkohpp3bl0j.png
I'm not sure whether this is the main reason for the failure or if it's related to an issue with InfiniCloud or Zotero and thus posting this thread here to seek assistance.
Any discussion or guidance on this issue would be greatly appreciated! :)
I've been using Zotero with syncing through WebDAV (InifiniCloud) for several months, and everything has been working great. However, the last successful sync between my iPad and Windows PC was about 72 hours ago, and certificate issue as below has suddenly occurred.
https://s3.amazonaws.com/zotero.org/images/forums/u14294938/vklcys47xs79eh65ux5u.jpg
I've refer to several post and the closest error as what I'm facing is from this Documentation.
https://www.zotero.org/support/kb/incomplete_cert_chain
According to the documentation, intermediate certificates might seeing “Chain issues: Incomplete” in orange under “Additional Certificates (if supplied)” when verify through SSL Labs server test, however when I check through the test, my domain doesn't shows error in Chain issues.
Instead, I'm seeing it has a CRL ERROR: IOException occurred as shown below.
https://s3.amazonaws.com/zotero.org/images/forums/u14294938/1ce4hhuyypkzz8b4j1h0.png
https://s3.amazonaws.com/zotero.org/images/forums/u14294938/qjzxe44j5mkohpp3bl0j.png
I'm not sure whether this is the main reason for the failure or if it's related to an issue with InfiniCloud or Zotero and thus posting this thread here to seek assistance.
Any discussion or guidance on this issue would be greatly appreciated! :)
This discussion has been closed.
aki.teracloud.jp uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown.
The server might not be sending the appropriate intermediate certificates.
An additional root certificate may need to be imported.
Error code: SEC_ERROR_UNKNOWN_ISSUER
____________________________________________________________________
Does anyone know how to solve this problem? I'm not using any proxy or VPN, and of course, the net is good. I tried to copy the override document from Firefox to the Zotero directory as per the official instructions for the safety certificate problem. But it doesn't work. Thank you in advance.
In the past year or so, I have been using Infinicloud as the online file synchronization platform for Zotero without encountering any issues. Today, while using Zotero normally, I suddenly received the following message:
```
ogi.teracloud.jp uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown.
The server might not be sending the appropriate intermediate certificates.
An additional root certificate may need to be imported.
Error code: SEC_ERROR_UNKNOWN_ISSUER
```
No matter how many times I restart the software and device, or reinstall the software, this issue cannot be resolved. However, if I directly access the WebDAV link via a browser and enter the correct ID and password, I can directly access my online library, which confuses me. I hope to receive a response. Thank you.
Problem in Zotero; Joplin with Infini Cloud works well.
==================================
seto.teracloud.jp uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown.
The server might not be sending the appropriate intermediate certificates.
An additional root certificate may need to be imported.
Error code: SEC_ERROR_UNKNOWN_ISSUER
==================================
It just happend since last night. I see other users are reporting the issue. Is this caused by Teracloud?
[merged threads removed]
"
Thank you for contacting InfiniCLOUD Support.
Unfortunately, this appears to be an issue from Zotero's side, not InfiniCLOUD.
We have noticed that since the Beta release of Zotero 7, issues with Zotero 6 has occurred more frequently.
While we can not 100% confirm, it does appear that certain credentials from Zotero's side have not been kept up-to-date, causing this particular issue.
We advise reaching out directly to Zotero to find a solution.
Thank you for your understanding and cooperation.
"
For now, you can use the Zotero 7 beta and switch back to the release version when Zotero 7 is released. (Update: Advanced users can follow the steps below to add the root certificate to Zotero 6 manually, but we recommend just using the beta.)
And the UI of Zotero 7 beta is much better :)
@zhaozhibo, not all the plug-ins are supported in Zotero 7. Better BibTex automatically updated and working for me. However, Zotero PDF Preview and some others are not working and are showing "Zotero PDF Preview (disabled)" in my case.
Here are the steps:
1. Download Firefox, open InifiniCloud in it, and click the lock icon next to the address bar.
2. Click "Connection Secure" - "More information" - "View Certificate".
3. In the opened page, click the "GlobalSign GCC R6 AlphaSSL CA 2023" tab, and download the "PEM (cert)" certificate under "Miscellaneous".
4. Import the certificate into Firefox: Click the menu button (three horizontal lines) at the top right of Firefox, select "Settings". In the left menu, choose "Privacy & Security". Scroll down to the "Certificates" section, click "View Certificates". In the "Certificate Manager" window, select the "Authorities" tab. Click the "Import" button, select and import the previously exported certificate file.
5. In the Firefox address bar, type "about:support", find the Profile Folder, and open this folder. Find the cert9.db, key4.db, and pkcs11.txt files, and copy them to the Zotero profile directory (https://www.zotero.org/support/kb/profile_directory).
6. Restart Zotero, re-enter your account information, and then verify the server.
7. Success!
For Mac users, security.enterprise_roots.enabled should be set to 'false' in about:config after Firefox installation and can be reset after.
> If you get a warning about an existing certificate after "Click the "Import" button, select and import the previously exported certificate file. "
> delete it and try again.
Thank you for letting me know. Glad to know that it helps!
Still not work for me
Thanks
Hope it solves it for you!
The workaround from @lisheng.zhou for Zotero 6 is correct and will work, but messing with the Firefox and/or Zotero certificate settings without understanding what you're doing is a really bad idea.
If you're at all unclear on this, please just use the Zotero 7 beta for now — which is much safer than altering certificate settings — and switch to the release version of Zotero 7 when it comes out.Update: Zotero 7 is now available.