Recent answers to Encrypted HTTPS websites always ask if I want to trust the certificatehttps://support.mozilla.org/en-US/questions/13972772023-02-07T01:16:07-08:00Go to menu ≡ -> Settings and check your Proxy settings. It should be set to No proxy.
2023-02-07T01:16:07-08:00TyDraniuhttps://support.mozilla.org/en-US/questions/1397277#answer-1564491<p>Go to menu ≡ -&gt; <strong>Settings</strong> and check your Proxy settings. It should be set to <strong>No proxy</strong>.
</p>Perhaps new certificates are generated regularly by the device or by an intermediary server represen2023-02-07T01:13:53-08:00jscher2000https://support.mozilla.org/en-US/questions/1397277#answer-1564489<p>Perhaps new certificates are generated regularly by the device or by an intermediary server representing itself as the device.&nbsp;??
</p><p>Two things I notice about the cert after decoding:
</p><p>(1) "Issuer: CN = The original certificate provided by the server is untrusted"
</p><p>I think that is provided by the server and is not a judgment issued by Firefox?
</p><p>(2) The Subject Alt Name (SAN) field is blank.
</p><p>More recent versions of Firefox require the server name to be in this field.
</p><p>But setting those aside, the fact that the certificate keeps changing would still be a problem when you need to make an exception.
</p>
<hr>
<p>Have you checked for firmware updates? <a href="https://www.qnap.com/de-de/download" rel="nofollow">https://www.qnap.com/de-de/download</a>
</p>As you can see, the server's certificate keeps changing. Every few hours. What could be the cause of2023-02-07T00:57:03-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1564482<p>As you can see, the server's certificate keeps changing. Every few hours. What could be the cause of this?
</p>First Try:
https://mamt-nas01/redirect.html?count=0.8902489143157176
Der Zertifikat-Aussteller2023-02-07T00:56:19-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1564481<p>First Try:
</p><pre> https://mamt-nas01/redirect.html?count=0.8902489143157176
Der Zertifikat-Aussteller der Gegenstelle wurde nicht erkannt.
HTTP Strict Transport Security: false
HTTP Public Key Pinning: false
Zertifikatskette:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</pre>
<p>Second Try:
</p><pre> https://mamt-nas01/redirect.html?count=0.9115867796392408
</pre>
<pre> Der Zertifikat-Aussteller der Gegenstelle wurde nicht erkannt.
</pre>
<pre> HTTP Strict Transport Security: false
HTTP Public Key Pinning: false
</pre>
<pre> Zertifikatskette:
</pre>
<pre> -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</pre>jscher2000 - Support Volunteer schrieb
After a few hours... Unless your server generated a new cert2022-11-28T06:14:38-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1550748<em><p>jscher2000 - Support Volunteer <a href="#answer-1550747" rel="nofollow">schrieb</a></p></em>
<blockquote>
After a few hours... Unless your server generated a new certificate, it's hard to understand what would be changing in a few hours.
</blockquote>
<p>I will wait a few hours and revisit the same QNAP NAS and post the certificate string here. Maybe this will change.
</p>
<em><p>jscher2000 - Support Volunteer <a href="#answer-1550747" rel="nofollow">schrieb</a></p></em>
<blockquote>
Or could there be any process on your system that removes/replaces the <strong>cert9.db</strong> file in your profile folder which stores exceptions? (<a href="/en-US/kb/profiles-where-firefox-stores-user-data" rel="nofollow">Profiles - Where Firefox stores your bookmarks, passwords and other user data</a>)
</blockquote>
<p>I don't know. Maybe it's because of my anti-virus program <strong>ESET</strong>? Maybe it changes the <strong>cert9.db</strong>?
</p>Andreas Fendt said
I am really pleased how many are concerned with my problem. Thank you!
jscher2002022-11-28T06:06:45-08:00jscher2000https://support.mozilla.org/en-US/questions/1397277#answer-1550747<em><p>Andreas Fendt <a href="#answer-1550745" rel="nofollow">said</a></p></em>
<blockquote>I am really pleased how many are concerned with my problem. Thank you!
<em><p>jscher2000 - Support Volunteer <a href="#answer-1550741" rel="nofollow">schrieb</a></p></em><blockquote>Does Firefox forget if you simply close and re-open that tab, or only when you exit/restart Firefox and try again in the new session? </blockquote>This is an interesting question: when I click on "Accept risk and continue", it doesn't matter for some time whether I restart Firefox (with <strong>about:profiles</strong> -&gt; Restart Normal) or close the tab and open it again. There is no warning anymore. After a few hours I get this warning again.</blockquote>
<p>After a few hours... Unless your server generated a new certificate, it's hard to understand what would be changing in a few hours.
</p><p>Or could there be any process on your system that removes/replaces the <strong>cert9.db</strong> file in your profile folder which stores exceptions? (<a href="/en-US/kb/profiles-where-firefox-stores-user-data" rel="nofollow">Profiles - Where Firefox stores your bookmarks, passwords and other user data</a>)
</p>I am really pleased how many are concerned with my problem. Thank you!
jscher2000 - Support Volunte2022-11-28T05:51:53-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1550745<p>I am really pleased how many are concerned with my problem. Thank you!
</p>
<em><p>jscher2000 - Support Volunteer <a href="#answer-1550741" rel="nofollow">schrieb</a></p></em>
<blockquote>
Does Firefox forget if you simply close and re-open that tab, or only when you exit/restart Firefox and try again in the new session?
</blockquote>
<p>This is an interesting question: when I click on "Accept risk and continue", it doesn't matter for some time whether I restart Firefox (with <strong>about:profiles</strong> -&gt; Restart Normal) or close the tab and open it again. There is no warning anymore. After a few hours I get this warning again.
</p>
<em><p>jscher2000 - Support Volunteer <a href="#answer-1550741" rel="nofollow">schrieb</a></p></em>
<blockquote>
Firefox may remember exceptions only for the current session if you either
(A) use private windows -- site-specific information is not persisted to disk
</blockquote>
<p>In this context, I am not concerned with private windows. I open these web pages normally.
</p>
<em><p>jscher2000 - Support Volunteer <a href="#answer-1550741" rel="nofollow">schrieb</a></p></em>
<blockquote>
(B) modified the value of <strong>security.certerrors.permanentOverride</strong> to false in about:config (but this is very uncommon unless you used a hardening list)
</blockquote>
<p>I have not changed this setting and it is set to <strong>true</strong>.
</p>Andreas Fendt said
The strange thing is that I get this error message every time I connect to this N2022-11-28T05:44:44-08:00jscher2000https://support.mozilla.org/en-US/questions/1397277#answer-1550741<em><p>Andreas Fendt <a href="#answer-1550740" rel="nofollow">said</a></p></em>
<blockquote>The strange thing is that I get this error message every time I connect to this NAS.
</blockquote>
<p>Does Firefox forget if you simply close and re-open that tab, or only when you exit/restart Firefox and try again in the new session?
</p><p>Firefox may remember exceptions only for the current session if you either
</p><p>(A) use private windows -- site-specific information is not persisted to disk
</p><p>(B) modified the value of <strong>security.certerrors.permanentOverride</strong> to false in about:config (but this is very uncommon unless you used a hardening list)
</p>cor-el schrieb
If you click the blue SEC_ERROR_UNKNOWN_ISSUER link then Firefox should show the base2022-11-28T05:32:07-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1550740<em><p>cor-el <a href="#answer-1550739" rel="nofollow">schrieb</a></p></em>
<blockquote>If you click the blue SEC_ERROR_UNKNOWN_ISSUER link then Firefox should show the base64 encoded certificate data and copy this data to the clipboard.</blockquote>
<p>I have just posted.
</p>
<em><p>cor-el <a href="#answer-1550739" rel="nofollow">schrieb</a></p></em>
<blockquote>
The screenshot shows a QNAP NAS certificate that you would expect to be used for connecting to a NAS and not for accessing internet.
</blockquote>
<p>This is also a local access, so no access via the Internet to the device. The strange thing is that I get this error message every time I connect to this NAS.
</p>TyDraniu schrieb
There should be also Download (string) link below. Try to click it and paste here t2022-11-28T05:27:12-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1550738<em><p>TyDraniu <a href="#answer-1550734" rel="nofollow">schrieb</a></p></em>
<blockquote>There should be also <strong>Download (string)</strong> link below. Try to click it and paste here the output.
</blockquote>
<p>Attached here is this issue:
</p><p><code>
https://mamt-nas01/redirect.html?count=0.07759302844965466
</code></p><p><code>Der Zertifikat-Aussteller der Gegenstelle wurde nicht erkannt.
</code></p><p><code>HTTP Strict Transport Security: false
HTTP Public Key Pinning: false
</code></p><p><code>Zertifikatskette:
</code></p><code>
<hr>BEGIN CERTIFICATE-----
<p>MIIDvTCCAqWgAwIBAgIQW1DOKQjATneN1uH97hPDCTANBgkqhkiG9w0BAQsFADBH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</p>
<hr>END CERTIFICATE-----
</code><p><code></code>
</p>There should be also Download (string) link below. Try to click it and paste here the output.
2022-11-28T05:15:41-08:00TyDraniuhttps://support.mozilla.org/en-US/questions/1397277#answer-1550734<p>There should be also <strong>Download (string)</strong> link below. Try to click it and paste here the output.
</p>TyDraniu schrieb
Is there an Advanced... button? Can you click it and paste here the certificate?
A2022-11-28T04:40:09-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1550731<em><p>TyDraniu <a href="#answer-1550131" rel="nofollow">schrieb</a></p></em>
<blockquote>Is there an <strong>Advanced...</strong> button? Can you click it and paste here the certificate?
</blockquote>
<p>Attached are two screenshots of the certificate and the warning. Is that enough for you
</p>Is there an Advanced... button? Can you click it and paste here the certificate?
2022-11-25T00:49:26-08:00TyDraniuhttps://support.mozilla.org/en-US/questions/1397277#answer-1550131<p>Is there an <strong>Advanced...</strong> button? Can you click it and paste here the certificate?
</p>It happens with every page...
2022-11-25T00:19:54-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1550125<p>It happens with every page...
</p>Does it happen for every website? If not, can you provide an exemplary domain address?
2022-11-24T22:19:58-08:00TyDraniuhttps://support.mozilla.org/en-US/questions/1397277#answer-1550111<p>Does it happen for every website? If not, can you provide an exemplary domain address?
</p>What would you like to have with it? It's like I described: I open the web interface of my switch on2022-11-24T21:40:02-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1550107<p>What would you like to have with it? It's like I described: I open the web interface of my switch on day 1 for example and it comes up with the standard query if I trust this website "Warning: Potential Security Risk Ahead". I click on "Advanced..." and then on "Accept the Risk and Continue". On the second day 2 when I go back to the web interface of the switch the same message appears again.
</p>Can you provide any example of this issue?
2022-11-24T20:51:09-08:00TyDraniuhttps://support.mozilla.org/en-US/questions/1397277#answer-1550105<p>Can you provide any example of this issue?
</p>Does no one have any ideas about this? This topic would be very important to me. Because it is alrea2022-11-24T20:44:23-08:00mail1564https://support.mozilla.org/en-US/questions/1397277#answer-1550103<p>Does no one have any ideas about this? This topic would be very important to me. Because it is already a bit annoying.
</p>