Untrusted certificate issue with Firefox and Webdriver, Python

[afrosteve]

I'm trying to hit a web server that's using a certificate with a different hostname than the certificate's Common Name. Firefox throws up the 'Untrusted Connection' page when the page is loaded. The cert is issued by DigiCert.

Normally, Webdriver is setup to accept all the certificates and the page loads with no issues. Unfortunately, it seems like that isn't working anymore. 

Now I get the Untrusted Connection page with the following combination:

Windows 7 x64, Python 2.7.2, Selenium 2.21.2 and Firefox 11.

Interestingly, the Selenium and Firefox combination works fine on Ubuntu 11.10. I can just create a WebDriver object and the default Firefox profile settings work as expected.

Is anyone seeing similar behavior, or figured out a work around to this?

Regards,

steve

[Jayakumar C]

Have you tried instantiating the webdriver object with the FF profile that has the certificate accepted ?

--
You received this message because you are subscribed to the Google Groups "Selenium Users" group.
To view this discussion on the web visit https://groups.google.com/d/msg/selenium-users/-/AE3iYkf1dokJ.
To post to this group, send email to seleniu...@googlegroups.com.
To unsubscribe from this group, send email to selenium-user...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/selenium-users?hl=en.

--
Jayakumar

[afrosteve]

I have. I created a new profile with the cert exceptions and instantiated the Webdriver with it.

I'm pretty sure I got the syntax right. I confirmed the cert_override.txt got copied to the temporary profile folder the Webdriver creates. It didn't help unfortunately.

Do you have any idea if the line endings matter? I generated the profile on a Linux machine, but was using the profile on a Windows machine. I will double check this.

On Saturday, April 21, 2012 1:26:37 PM UTC-4, Jayakumar wrote:

Have you tried instantiating the webdriver object with the FF profile that has the certificate accepted ?

On 21 April 2012 00:30, afrosteve wrote:

I'm trying to hit a web server that's using a certificate with a different hostname than the certificate's Common Name. Firefox throws up the 'Untrusted Connection' page when the page is loaded. The cert is issued by DigiCert.

Normally, Webdriver is setup to accept all the certificates and the page loads with no issues. Unfortunately, it seems like that isn't working anymore. 

Now I get the Untrusted Connection page with the following combination:

Windows 7 x64, Python 2.7.2, Selenium 2.21.2 and Firefox 11.

Interestingly, the Selenium and Firefox combination works fine on Ubuntu 11.10. I can just create a WebDriver object and the default Firefox profile settings work as expected.

Is anyone seeing similar behavior, or figured out a work around to this?

Regards,

steve

--

Jayakumar

[Krishnan Mahadevan]

On Sunday, April 22, 2012, afrosteve wrote:

I have. I created a new profile with the cert exceptions and instantiated the Webdriver with it.

I'm pretty sure I got the syntax right. I confirmed the cert_override.txt got copied to the temporary profile folder the Webdriver creates. It didn't help unfortunately.

Do you have any idea if the line endings matter? I generated the profile on a Linux machine, but was using the profile on a Windows machine. I will double check this.

 

So you mean you copied over the directory from the linux box and scp'ed it to the windows machine? How are you binding this profile to firefox in your code? 

On Saturday, April 21, 2012 1:26:37 PM UTC-4, Jayakumar wrote:

Have you tried instantiating the webdriver object with the FF profile that has the certificate accepted ?

On 21 April 2012 00:30, afrosteve wrote:

I'm trying to hit a web server that's using a certificate with a different hostname than the certificate's Common Name. Firefox throws up the 'Untrusted Connection' page when the page is loaded. The cert is issued by DigiCert.

Normally, Webdriver is setup to accept all the certificates and the page loads with no issues. Unfortunately, it seems like that isn't working anymore. 

Now I get the Untrusted Connection page with the following combination:

Windows 7 x64, Python 2.7.2, Selenium 2.21.2 and Firefox 11.

Interestingly, the Selenium and Firefox combination works fine on Ubuntu 11.10. I can just create a WebDriver object and the default Firefox profile settings work as expected.

Is anyone seeing similar behavior, or figured out a work around to this?

Regards,

steve

--
Jayakumar

--

You received this message because you are subscribed to the Google Groups "Selenium Users" group.

To view this discussion on the web visit https://groups.google.com/d/msg/selenium-users/-/J8v6Z8NQdNoJ.

To post to this group, send email to seleniu...@googlegroups.com.
To unsubscribe from this group, send email to selenium-user...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/selenium-users?hl=en.

--
Thanks & Regards
Krishnan Mahadevan

"All the desirable things in life are either illegal, expensive, fattening or in love with someone else!"
My Scribblings @ http://wakened-cognition.blogspot.com/

[afrosteve]

I don't have the source in front of me but it's something like

profile = FirefoxProfile(profile_directory=<path to profile>)
driver = Webdriver(firefox_profile=profile)

Where <path to profile> is the Windows path to where I put the Firefox profile folder.

On Saturday, April 21, 2012 2:46:51 PM UTC-4, Krishnan wrote:

On Sunday, April 22, 2012, afrosteve wrote:

I have. I created a new profile with the cert exceptions and instantiated the Webdriver with it.

I'm pretty sure I got the syntax right. I confirmed the cert_override.txt got copied to the temporary profile folder the Webdriver creates. It didn't help unfortunately.

Do you have any idea if the line endings matter? I generated the profile on a Linux machine, but was using the profile on a Windows machine. I will double check this.

 

So you mean you copied over the directory from the linux box and scp'ed it to the windows machine? How are you binding this profile to firefox in your code? 

On Saturday, April 21, 2012 1:26:37 PM UTC-4, Jayakumar wrote:

Have you tried instantiating the webdriver object with the FF profile that has the certificate accepted ?

On 21 April 2012 00:30, afrosteve wrote:

I'm trying to hit a web server that's using a certificate with a different hostname than the certificate's Common Name. Firefox throws up the 'Untrusted Connection' page when the page is loaded. The cert is issued by DigiCert.

Normally, Webdriver is setup to accept all the certificates and the page loads with no issues. Unfortunately, it seems like that isn't working anymore. 

Now I get the Untrusted Connection page with the following combination:

Windows 7 x64, Python 2.7.2, Selenium 2.21.2 and Firefox 11.

Interestingly, the Selenium and Firefox combination works fine on Ubuntu 11.10. I can just create a WebDriver object and the default Firefox profile settings work as expected.

Is anyone seeing similar behavior, or figured out a work around to this?

Regards,

steve

--
Jayakumar

--
You received this message because you are subscribed to the Google Groups "Selenium Users" group.
To view this discussion on the web visit https://groups.google.com/d/msg/selenium-users/-/J8v6Z8NQdNoJ.

To post to this group, send email to selenium-users@googlegroups.com.
To unsubscribe from this group, send email to selenium-users+unsubscribe@googlegroups.com.

For more options, visit this group at http://groups.google.com/group/selenium-users?hl=en.

[Jayakumar C]

Can help you better if you could share your app url or some other public url where we can see the same behaviour.

To view this discussion on the web visit https://groups.google.com/d/msg/selenium-users/-/_mQUXEUn0LMJ.

To post to this group, send email to seleniu...@googlegroups.com.
To unsubscribe from this group, send email to selenium-user...@googlegroups.com.

For more options, visit this group at http://groups.google.com/group/selenium-users?hl=en.

--
Jayakumar

[afrosteve]

Unfortunately the problem is on the internal network. The public side has a matching domain name in the certificate so the problem doesn't occur.

I'll keep trying I guess.

[afrosteve]

I don't think it's imperfect, it's that Webdriver turns on a few options in the profile that may be the cause of your issue.

I'm not sure if you've read it already, but this outlines the certificate handling in Webdriver and Firefox:

http://code.google.com/p/selenium/wiki/UntrustedSSLCertificates

Do you know why the connection is untrusted? Is it a host name mismatch?

On Friday, September 14, 2012 12:41:30 AM UTC-4, Jo wrote:

 

Hi All,

 

I think I'm experiencing the same issues with Selenium Webdriver/Firefox.

 

1) When I launch Firefox manually, it can go to the HTTPS site I want to access.

 

2) I then launch Firefox via Webdriver and pass to it the folder where the default Firefox profile is. Firefox launches but cannot access the HTTPS site (Connection is Untrusted message).

 

3) I then verified if this Webdriver-launched Firefox is using the profile - YES it is as all the Bookmarks and Add-ins are present. If I try to launch Firefox from Webdriver without passing it the folder for the default profile, Firefox will launch but none of my Bookmarks and Add-ins. So I know Webdriver is picking up the Profile I specified.

 

4) So why can't the Webdriver-launched Firefox still cannot access the HTTPS site? Well I noticed that it is not pointing to the folder that I specified for the default profile. Instead it is pointing to a Temp location. It seems that it went to the default profile folder I specified, copied it to the Temp location, then launched Firefox using a cloned default profile. And I suspected that it didn't clone the profile 100% as the HTTPS site still cannot be accessed.

 

5) So now I tried to verify if the hypothesis in 4) above is true. I did this by running Firefox Profile Manager, and selected the Temp profile location to be the new default profile. I then launched Firefox manually and sure enough all the Bookmarks are present, all the add-ins are present but cannot access the HTTPS site! Exactly the same behaviour as 4) above, although launched manually. 

 

Q: Why is Webdriver trying to clone the profile I specify to use?  And this cloning process is not perfect and that's what's causing the problem - imperfect copy of the profile.

 

 

Regards,

Jo