FireFox 52: "Your connection is not secure" - How to manage an exception ?

[R.Wieser]

Hello all,

Today I tried to visit a website and got an SSL "Your connection is not
secure" page instead. After clicking the "Advanced" button I got the
information that the certificate was expired ("advanced" ? My foot).

Two things:

1) All I got was an "add exception..." button, when I would have liked a
"for this session only..." one. Is there any way to enable this ?

2) I /could/ add an exception, but there is no info there to where to manage
(read: remove) the exception afterwards (so I get the same warning the next
time I'm visiting that webpage), which makes me hesitant.

Where do I manage those /exceptions/ ? There is not mentioning of them
under tools -> options ->advanced -> certificates.

FireFox 52

Regards,
Rudy Wieser

[WaltS48]

Does this help?

<https://support.mozilla.org/en-US/kb/secure-website-certificate#w_problematic-certificates>

--
OS: Ubuntu Linux 18.04LTS - Gnome Desktop
https://www.thunderbird.net/en-US/get-involved/
Fire the Apprentice!

[Jean-David Beyer]

On 9/11/19 8:53 AM, WaltS48 wrote:
> On 9/11/19 8:27 AM, R.Wieser wrote:
>> Hello all,
>>
>> Today I tried to visit a website and got an SSL "Your connection is not
>> secure" page instead.  After clicking the "Advanced" button I got the
>> information that the certificate was expired ("advanced" ? My foot).
>>
>> Two things:
>>
>> 1) All I got was an "add exception..." button, when I would have liked a
>> "for this session only..." one.   Is there any way to enable this ?
>>
>> 2) I /could/ add an exception, but there is no info there to where to
>> manage
>> (read: remove) the exception afterwards (so I get the same warning the
>> next
>> time I'm visiting that webpage), which makes me hesitant.
>>
>> Where do I manage those /exceptions/ ?  There is not mentioning of them
>> under tools -> options ->advanced -> certificates.
>>
>> FireFox 52
>>
>> Regards,
>> Rudy Wieser
>>
>>
>
> Does this help?
>
> <https://support.mozilla.org/en-US/kb/secure-website-certificate#w_problematic-certificates>
>
>

Not in the least. It says:

> To view the problematic certificate, follow these steps:
>
> On the "Your connection is not secure" warning page, click Advanced.

There is nothing to click on the warning page. It says only this:

> Your connection is not secure
>

> The website tried to negotiate an inadequate level of security.
>
> www.rt.com uses security technology that is outdated and vulnerable to attack. An attacker could easily reveal information which you thought to be safe. The website administrator will need to fix the server first before you can visit the site.
>
> Error code: NS_ERROR_NET_INADEQUATE_SECURITY


--
.~. Jean-David Beyer
/V\ PGP-Key:166D840A 0C610C8B
/( )\ Shrewsbury, New Jersey
^^-^^ 09:30:01 up 3 days, 22:31, 2 users, load average: 4.87, 4.70, 4.75

[R.Wieser]

Jean-David,

Would you please NOT put /your/ problems in a thread where I'm trying to
solve mine ?

>Not in the least. It says:
>
>> To view the problematic certificate, follow these steps:
>>
>> On the "Your connection is not secure" warning page, click Advanced.
>
> There is nothing to click on the warning page.

As mentioned in my post, on /my/ "Your connection is not secure" warning
page that "Advanced" button is present, and when clicked it opens a
sub-window which tells me the cause (expired certificate), and shows an "Add
exception...." button.

Maybe you are looking at a diffent version of FireFox ?

Regards,
Rudy Wieser

[R.Wieser]

WaltS48,

> Does this help?
>
[snip link]

Not quite. Although it helped me to overcome my fear of that "Add
exception" button (which could have done /just that/, instead of opening a
dialog with more information and a "Confirm security exception" button),
viewing the certificate itself doesn't give me any info about how to
/manage/ them. And in this case /especially/ the "exception" subgroup.

By the way, I see a "Permanently store this exception" tickmark in the
lower-left of that "Add security exception" dialog, but absolutily zero info
about what happens/what it means when I un-tick it.

In my case I would have liked to accept the dialog for either the current
session, or if possible push its expiry date a bit forward (and nothing
else!).

Regards,
Rudy Wieser