有没有办法让 Firefox 忽略无效的 ssl 证书?

我正在维护一些 Web 应用程序。开发和 qa 环境使用无效/过期的 ssl 证书。

虽然通常来说这是件好事,但是 Firefox 会让我点击十几次来接受证书,这真的很烦人。

是否有一个配置参数使 Firefox (可能也包括 IE)接受任何 ssl 证书?

编辑: 我已经接受了这个解决方案,它起作用了。但是感谢所有建议使用自签名证书的人。我完全知道,接受的解决方案留给我一个 安全漏洞。尽管如此,我还是懒得更改所有应用程序和所有环境的证书..。

但是我也强烈建议任何人启用验证!

294838 次浏览

Instead of using invalid/outdated SSL certificates, why not use self-signed SSL certificates? Then you can add an exception in Firefox for just that site.

The MitM Me addon will do this - but I think self-signed certificates is probably a better solution.

Using a free certificate is a better idea if your developers use Firefox 3. Firefox 3 complains loudly about self-signed certificates, and it is a major annoyance.

Go to Tools > Options > Advanced "Tab"(?) > Encryption Tab

Click the "Validation" button, and uncheck the checkbox for checking validity

Be advised though that this is pretty unsecure as it leaves you wide open to accept any invalid certificate. I'd only do this if using the browser on an Intranet where the validity of the cert isn't a concern to you, or you aren't concerned in general.

For a secure alternative, try the Perspectives Firefox add-on

If this link doesn't work try this one: https://addons.mozilla.org/en-US/firefox/addon/perspectives/

Try Add Exception: FireFox -> Tools -> Advanced -> View Certificates -> Servers -> Add Exception.

Create some nice new 10 year certificates and install them. The procedure is fairly easy.

Start at (1B) Generate your own CA (Certificate Authority) on this web page: Creating Certificate Authorities and self-signed SSL certificates and generate your CA Certificate and Key. Once you have these, generate your Server Certificate and Key. Create a Certificate Signing Request (CSR) and then sign the Server Key with the CA Certificate. Now install your Server Certificate and Key on the web server as usual, and import the CA Certificate into Internet Explorer's Trusted Root Certification Authority Store (used by the Flex uploader and Chrome as well) and into Firefox's Certificate Manager Authorities Store on each workstation that needs to access the server using the self-signed, CA-signed server key/certificate pair.

You now should not see any warning about using self-signed Certificates as the browsers will find the CA certificate in the Trust Store and verify the server key has been signed by this trusted certificate. Also in e-commerce applications like Magento, the Flex image uploader will now function in Firefox without the dreaded "Self-signed certificate" error message.

If you have a valid but untrusted ssl-certificates you can import it in Extras/Properties/Advanced/Encryption --> View Certificates. After Importing ist as "Servers" you have to "Edit trust" to "Trust the authenticity of this certifikate" and that' it. I always have trouble with recording secure websites with HP VuGen and Performance Center

I ran into this issue when trying to get to one of my companies intranet sites. Here is the solution I used:

  1. enter about:config into the firefox address bar and agree to continue.
  2. search for the preference named security.ssl.enable_ocsp_stapling.
  3. double-click this item to change its value to false.

This will lower your security as you will be able to view sites with invalid certs. Firefox will still prompt you that the cert is invalid and you have the choice to proceed forward, so it was worth the risk for me.

In the current Firefox browser (v. 99.0.1) I was getting this error when looking at Web Developer Tools \ Network tab:

MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT

enter image description here

I was trying to debug an Angular app which is served at https://localhost:4200... however the real port it's pointing to and being debugged from in Visual Studio 2022 is 44322.

I had to follow these steps to fix the issue:

  1. Open Firefox Settings;

  2. Look for Privacy & Security tab on the left;

  3. Scroll down to the bottom and look for Certificates;

  4. View Certificates;

  5. In this window you must click Add Exception and enter the location. In my case it was:

    https://localhost:44322

  6. Click Get Certificate button;

  7. Click Confirm Security Exception button.

After that, try reloading your page.

enter image description here