Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Need to configure industrial routers with embedded https servers using 512 bit encryption. Firefox will no longer allow? How do I resolve with Firefox?

  • 4 个回答
  • 2 人有此问题
  • 11 次查看
  • 最后回复者为 techi

more options

I configure network equipment (e,g, routers, switches, media converters, etc.) within industrial facilities that use embedded https servers. Some of this equipment is only 3 years old and uses 512 bit encryption, but Firefox v40.0.1 will not allow me to access this equipment. These networks do not have Internet access and my client will not replace it when it is only 3 years old. How do I accept these embedded certificates in Firefox so as to configure this equipment? I have found no way to enter exceptions and I need a solution.

I configure network equipment (e,g, routers, switches, media converters, etc.) within industrial facilities that use embedded https servers. Some of this equipment is only 3 years old and uses 512 bit encryption, but Firefox v40.0.1 will not allow me to access this equipment. These networks do not have Internet access and my client will not replace it when it is only 3 years old. How do I accept these embedded certificates in Firefox so as to configure this equipment? I have found no way to enter exceptions and I need a solution.

所有回复 (4)

more options

hello, what kind of error are you getting?

more options

I get an error stating that the server certificate included a public key that was too weak. Error code: SSL_ERROR_WEAK_SERVER_CERT_KEY.

more options

looks like it going to be fixed (=error made overridable) with firefox 48 which is released as beta version later this week: https://bugzilla.mozilla.org/show_bug.cgi?id=1182742

more options

That would be great because in the fields in which I operate in (industry and utilities), this kind of equipment is generally kept for at least 10 or more years. It's "hardened", quite expensive and no client will re-purchase to replace 3-year old eqpt for such a reason as is causing this issue. And to keep accidental security exposure minimal, override can be limited to local network access -- the override ability need not be routable.

Thanks for your help and the info that an impending version update will resolve this issue! I need it ASAP.