Re: Firefox won't allow connection when site certificate is invalid

2015-04-18 Thread Bruno Wolff III
as yet, i have never been unable to accept a site's unrecognized certificate. [firefox 24.8.0] There are some certs that are pinned (tor's site is one I remember) and you can't override those easily. If you have removed the default CAs and run into this you have to go somewhere esle i

Re: Firefox won't allow connection when site certificate is invalid

2015-04-14 Thread Patrick O'Callaghan
On Tue, 2015-04-14 at 09:22 -0600, Pete Travis wrote: > On Apr 14, 2015 5:12 AM, "Patrick O'Callaghan" > wrote: > > > > On Mon, 2015-04-13 at 20:18 -0500, g wrote: > > > > Has anyone else seen this? > > > > > > as yet, i have never been unable to accept a site's unrecognized > > > certificate. [fi

Re: Firefox won't allow connection when site certificate is invalid

2015-04-14 Thread Pete Travis
On Apr 14, 2015 5:12 AM, "Patrick O'Callaghan" wrote: > > On Mon, 2015-04-13 at 20:18 -0500, g wrote: > > > Has anyone else seen this? > > > > as yet, i have never been unable to accept a site's unrecognized > > certificate. [firefox 24.8.0] > > As I've explained, the problem is specifically with

Re: Firefox won't allow connection when site certificate is invalid

2015-04-14 Thread Patrick O'Callaghan
On Mon, 2015-04-13 at 20:18 -0500, g wrote: > > Has anyone else seen this? > > as yet, i have never been unable to accept a site's unrecognized > certificate. [firefox 24.8.0] As I've explained, the problem is specifically with Firefox 37. I already know it works with earlier versions. poc --

Re: Firefox won't allow connection when site certificate is invalid

2015-04-13 Thread g
On 04/10/2015 06:51 AM, Patrick O'Callaghan wrote: > I need to use Firefox to connect to a specific site which has > an unrecognized SSL certificate (the specific error is > "Peer's Certificate issuer is not recognised"). I get the usual > dialogue asking if I accept the risks, but clicki

Re: Firefox won't allow connection when site certificate is invalid

2015-04-13 Thread Patrick O'Callaghan
On Sun, 2015-04-12 at 20:30 +, Matthew Saltzman wrote: > On Sat, 2015-04-11 at 23:17 +0100, Patrick O'Callaghan wrote: > > On Sat, 2015-04-11 at 20:09 +, Matthew Saltzman wrote: > > > > Thanks, I was hopeful but it didn't work, even after restarting FF. > > > > > > I believe you want to se

Re: Firefox won't allow connection when site certificate is invalid

2015-04-12 Thread Matthew Saltzman
On Sat, 2015-04-11 at 23:17 +0100, Patrick O'Callaghan wrote: > On Sat, 2015-04-11 at 20:09 +, Matthew Saltzman wrote: > > > Thanks, I was hopeful but it didn't work, even after restarting FF. > > > > I believe you want to set > > services.sync.prefs.sync.security.OCSP.disable_button.managecr

Re: Firefox won't allow connection when site certificate is invalid

2015-04-12 Thread Patrick O'Callaghan
On Sat, 2015-04-11 at 15:52 +0100, Patrick O'Callaghan wrote: > On Sat, 2015-04-11 at 09:03 -0400, Tom Horsley wrote: > > On Sat, 11 Apr 2015 11:47:41 +0100 > > Patrick O'Callaghan wrote: > > > > > Unfortunately not. This is a site used for "official" purposes and there > > > is no way round it. A

Re: Firefox won't allow connection when site certificate is invalid

2015-04-11 Thread Patrick O'Callaghan
On Sat, 2015-04-11 at 20:09 +, Matthew Saltzman wrote: > > Thanks, I was hopeful but it didn't work, even after restarting FF. > > I believe you want to set > services.sync.prefs.sync.security.OCSP.disable_button.managecrl to > true > in about:config. Thanks, but there is no such boolean.

Re: Firefox won't allow connection when site certificate is invalid

2015-04-11 Thread Matthew Saltzman
On Fri, 2015-04-10 at 17:17 +0100, Patrick O'Callaghan wrote: > On Fri, 2015-04-10 at 17:44 +0200, Suvayu Ali wrote: > > On Fri, Apr 10, 2015 at 02:08:35PM +, Joshua Doll wrote: > > > On Fri, Apr 10, 2015 at 8:14 AM Patrick O'Callaghan > > > > > > wrote: > > > > > > > I need to use Firefox t

Re: Firefox won't allow connection when site certificate is invalid

2015-04-11 Thread Patrick O'Callaghan
On Sun, 2015-04-12 at 01:51 +0930, Tim wrote: > Allegedly, on or about 11 April 2015, Patrick O'Callaghan sent: > > And the site administrators do not respond to email. > > That's so they can say that "we haven't received any complaints"? :-\ No doubt. poc -- users mailing list users@lists.fe

Re: Firefox won't allow connection when site certificate is invalid

2015-04-11 Thread Tim
Allegedly, on or about 11 April 2015, Patrick O'Callaghan sent: > And the site administrators do not respond to email. That's so they can say that "we haven't received any complaints"? :-\ -- [tim@localhost ~]$ uname -rsvp Linux 3.9.10-100.fc17.x86_64 #1 SMP Sun Jul 14 01:31:27 UTC 2013 x86_64

Re: Firefox won't allow connection when site certificate is invalid

2015-04-11 Thread Patrick O'Callaghan
On Sat, 2015-04-11 at 09:03 -0400, Tom Horsley wrote: > On Sat, 11 Apr 2015 11:47:41 +0100 > Patrick O'Callaghan wrote: > > > Unfortunately not. This is a site used for "official" purposes and there > > is no way round it. And the site administrators do not respond to email. > > Create a virtual

Re: Firefox won't allow connection when site certificate is invalid

2015-04-11 Thread Tom Horsley
On Sat, 11 Apr 2015 11:47:41 +0100 Patrick O'Callaghan wrote: > Unfortunately not. This is a site used for "official" purposes and there > is no way round it. And the site administrators do not respond to email. Create a virtual machine with an older firefox in it and use the VM when you have to

Re: Firefox won't allow connection when site certificate is invalid

2015-04-11 Thread Patrick O'Callaghan
On Sat, 2015-04-11 at 10:32 +0200, Markus Schönhaber wrote: > Am 10.04.2015 um 18:19 CEST Patrick O'Callaghan: > > > On Fri, 2015-04-10 at 14:08 +, Joshua Doll wrote: > >> Is the cert also expired. I've run into where if the cert is self > >> signed, > >> or from an untrusted CA and expired it

Re: Firefox won't allow connection when site certificate is invalid

2015-04-11 Thread Markus Schönhaber
Am 10.04.2015 um 18:19 CEST Patrick O'Callaghan: > On Fri, 2015-04-10 at 14:08 +, Joshua Doll wrote: >> Is the cert also expired. I've run into where if the cert is self >> signed, >> or from an untrusted CA and expired it won't let you accept the cert. > > I can't get any information about t