Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

How to add a security exception to Firefox programmatically?

  • 2 回覆
  • 5 有這個問題
  • 14 次檢視
  • 最近回覆由 hldev

hldev
hldev
more options

We have a self-signed certificate assigned to a local web server hosted on localhost to enable SSL connection. It works for other browsers such as Chrome on Windows/IOS, Safari for IOS, and IE for Windows. But Firefox (version 53.0.X) complains it's not trusted because it's self signed. It also works by adding a security exception through Firefox certificate manager. Is there any way to do that programmatically so that this process can be automated for better user experience? Can you please point out a direction or links for this?

Thank you,

hldev

We have a self-signed certificate assigned to a local web server hosted on localhost to enable SSL connection. It works for other browsers such as Chrome on Windows/IOS, Safari for IOS, and IE for Windows. But Firefox (version 53.0.X) complains it's not trusted because it's self signed. It also works by adding a security exception through Firefox certificate manager. Is there any way to do that programmatically so that this process can be automated for better user experience? Can you please point out a direction or links for this? Thank you, hldev

所有回覆 (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Try:

hldev
hldev 提出問題者
more options

Thank you for the reply. I understand that the problem is caused by Firefox uses its own certificate store rather than Windows root CA store. By setting Firefox preference "security.enterprise_roots.enabled" to true will allow Firefox to trust all certs from Windows root CA. But it'll make all cert from Windows root CA to be trusted. Is it possible to trust only selected cert from Windows root CA?