Join the Mozilla’s Test Days event from Dec 2–8 to test the new Firefox address bar on Firefox Beta 134 and get a chance to win Mozilla swag vouchers! 🎁

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Firefox 4.0 and 4.0.1 can NOT handle multiple user certificates for a secure site (Firefox 2.x.y and 3.x.y CAN!!!)

  • 7 tontu
  • 177 am na jafe-jafe bii
  • 2 views
  • i mujjee tontu mooy tuturutko

more options

When you access a secure site with a user certificate Firefox 4.0 and 4.0.1, fail and the server says:


Secure Connection Failed An error occurred during a connection to www...com (Error code: ssl_error_renegotiation_not_allowed) The page you are trying to view can not be shown because the authenticity of the received data could not be verified. Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.


The problem is not the site, Firefox 3.x.y works perfect!, it ask the user for the Master Password and then to select which one of the certificates must be used (also ask if this decision will be permanent until Firefox Exit, this allow the user NOT to answer this certificate question every time a negotiation start with the server).

This is obviously a BUG (an awful one), because security should be a priority (if not, you can use Microsoft Explorer)

When you access a secure site with a user certificate Firefox 4.0 and 4.0.1, fail and the server says: --------------------------------------- Secure Connection Failed An error occurred during a connection to www...com (Error code: ssl_error_renegotiation_not_allowed) The page you are trying to view can not be shown because the authenticity of the received data could not be verified. Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site. --------------------------------------- The problem is not the site, Firefox 3.x.y works perfect!, it ask the user for the Master Password and then to select which one of the certificates must be used (also ask if this decision will be permanent until Firefox Exit, this allow the user NOT to answer this certificate question every time a negotiation start with the server). This is obviously a BUG (an awful one), because security should be a priority (if not, you can use Microsoft Explorer)

fgil moo ko soppali ci

Saafara biñ tànn

No, it is not a bug, but it is a fixed bug about a security issue that should fixed on web servers. Firefox 4 doesn't allow this anymore.

See:


You can look at the pref security.ssl.renego_unrestricted_hosts on the about:config page and add the sites that you want to allow to the string value.

To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website.
If you see a warning then you can confirm that you want to access that page.

Jàng tontu lii ci fi mu bokk 👍 5

All Replies (7)

more options

Saafara yiñ Tànn

No, it is not a bug, but it is a fixed bug about a security issue that should fixed on web servers. Firefox 4 doesn't allow this anymore.

See:


You can look at the pref security.ssl.renego_unrestricted_hosts on the about:config page and add the sites that you want to allow to the string value.

To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website.
If you see a warning then you can confirm that you want to access that page.

more options

Thanks!!!, I see, there is a problem with the old SSL/TLS protocol version that allow a man in the middle attack if renegotiation is active, is not a problem managing the certificates.

thank you again.

more options

You're welcome

more options

So......how do I -FIX- this? my bank won't let me see my account information anymore because of this $%#@ing problem!

more options

On the about:config page, at the pref security.ssl.renego_unrestricted_hosts you can make a double-click and type the web adresses separate by commas (www.adress1.com,www.adress2.fr,...) you want to allow. I've tested it and it works.

jim7963 moo ko soppali ci

more options

Hi, i have this problem to, but i have a terminal server and i want to make a changes to all users. Where have to make these changes? I forgot to say the i use Mozilla Firefox 5.0

Thank you in advance.

tuturutko moo ko soppali ci

more options

Nice, what a great forum 1 week and no answer. Good job.