Firefox won't allow connection when site certificate is invalid

[Matthew Saltzman]

On Fri, 2015-04-10 at 17:17 +0100, Patrick O'Callaghan wrote:
> On Fri, 2015-04-10 at 17:44 +0200, Suvayu Ali wrote:
> > On Fri, Apr 10, 2015 at 02:08:35PM +0000, Joshua Doll wrote:
> > > On Fri, Apr 10, 2015 at 8:14 AM Patrick O'Callaghan <pocallaghan at gmail.com>
> > > wrote:
> > > 
> > > > I need to use Firefox to connect to a specific site which has an
> > > > unrecognized SSL certificate (the specific error is "Peer's Certificate
> > > > issuer is not recognised"). I get the usual dialogue asking if I accept
> > > > the risks, but clicking on the Add Exception button does nothing. This
> > > > is FF 37.0.1 on F21.
> > > >
> > > > This specific site only works with FF and IE. It used to work with
> > > > previous versions of FF, but I last used it weeks ago so I can't be sure
> > > > which exact version introduced the breakage. I've already tried running
> > > > in safe mode, to no avail.
> > > >
> > > Is the cert also expired. I've run into where if the cert is self signed,
> > > or from an untrusted CA and expired it won't let you accept the cert.
> > 
> > Try unchecking the "Query OCSP ..." box under Advanced > Certificates.
> > 
> > Hope this helps,
> 
> Thanks, I was hopeful but it didn't work, even after restarting FF.

I believe you want to set
services.sync.prefs.sync.security.OCSP.disable_button.managecrl to true
in about:config.


> 
> poc
> 
> 

-- 
Matthew Saltzman
Clemson University Math Sciences
mjs AT clemson DOT edu