title: Firefox gives "The certificate is not trusted"
body: <p>I'm using Tomcat 7, with APR and a DigiCert signed "star" certificate for my org. I have a connector defined like:</p>
  
  <pre><code>&lt;Connector
             protocol="HTTP/1.1"
             port="8443" maxThreads="200"
             scheme="https" secure="true" SSLEnabled="true"
             SSLCertificateFile="/opt/certs/star.crt"
             SSLCertificateKeyFile="/opt/certs/star.key"
             SSLCertificateChainFile="/opt/certs/DigiCertCA.crt"
             SSLCACertificateFile="/opt/certs/star.pem"
             SSLVerifyClient="none" SSLProtocol="all"
             keypass="******" 
             /&gt;
  </code></pre>
  
  <p>IE and Chrome have no issues with my site/certs...Firefox though gives this warning, which searching online seems to be common:</p>
  
  <pre><code>The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer)
  </code></pre>
  
  <p>Also, when I run this openssl command:</p>
  
  <pre><code>openssl s_client -connect myorf.org:443 -showcerts
  </code></pre>
  
  <p>I do get a message at the end of the output which says:</p>
  
  <pre><code>Verify return code: 21 (unable to verify the first certificate)
  </code></pre>
  
  <p>So apparently there is some problem with the chain...I just don't know what nor how to fix this. One search brought up this answer to return code 21:</p>
  
  <pre><code>you have a problem with certificate installation and you have to re-install it properly. 
  </code></pre>
  
  <p>But when I installed my certs they reported successful, so I'm just not sure what I am missing to make Firefox happy...help please...?</p>