LibreWolf WinUpdater fails to connect to https://librewolf.dev behind corporate networks #75

Open
opened 2026-08-19 14:13:15 +00:00 by CCF100 · 6 comments

I'm using LibreWolf on my work laptop, and my company uses Zscaler for internet security. Zscaler injects its own self-signed certificate into all https connections so that it can monitor network traffic. It would be nice if this utility used the system certificate store, that way I wouldn't get these error messages every single time WinUpdater attempts to check for updates...

image
image

I'm using LibreWolf on my work laptop, and my company uses Zscaler for internet security. Zscaler injects its own self-signed certificate into all https connections so that it can monitor network traffic. It would be nice if this utility used the system certificate store, that way I wouldn't get these error messages every single time WinUpdater attempts to check for updates... ![image](/attachments/d041516f-e396-4da9-a501-e14f761e7c1d) ![image](/attachments/ca7e885c-d667-4b01-87d3-540fcb3f1be0)
Author

I should also note that this error persists regardless of which option I select in the Security Alert dialog.

I should also note that this error persists regardless of which option I select in the Security Alert dialog.
Owner

Your connection is being blocked by Zscaler. It returns its own HTML page with the title Internet Security by Zscaler, which is why it's in the error message.

Could you have a look at what happens if you open https://librewolf.dev/api/v1/version versus https://codeberg.org/api/v1/version ?

Your connection is being blocked by Zscaler. It returns its own HTML page with the title `Internet Security by Zscaler`, which is why it's in the error message. Could you have a look at what happens if you open https://librewolf.dev/api/v1/version versus https://codeberg.org/api/v1/version ?

Also this. Interestingly, if you visit Cloudflare Radar via the link provided, there does not appear to be an obvious reason for the block.

Also this. Interestingly, if you visit Cloudflare Radar via the link provided, there does not appear to be an obvious reason for the block.
Owner

@CCF100 @9hili9
So what happens with WinUpdater with the new version released today?

@CCF100 @9hili9 So what happens with WinUpdater with the new version released today?

Manipulating the HOSTS file to bypass DNS and updating to 154.0.1-2 appears to avoid the problem. WinUpdater was subsequently able to run successfully (without the DNS bypass). The bypass is still needed to get to this site, but that's a minor inconvenience.

Manipulating the HOSTS file to bypass DNS and updating to 154.0.1-2 appears to avoid the problem. WinUpdater was subsequently able to run successfully (without the DNS bypass). The bypass is still needed to get to this site, but that's a minor inconvenience.
Owner

Thanks for the update. Let's see if we can do something about it.

Is the same going on for you, @CCF100?

Thanks for the update. Let's see if we can do something about it. Is the same going on for you, @CCF100?
Sign in to join this conversation.
No labels
No milestone
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
librewolf/winupdater#75
No description provided.