X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

cannot "Add Exception" for an untrusted connection

Posted

I visit a few known intranet locations that do not have proper certificates installed; therefore, I receive the "This Connection is Untrusted" notice.

In 3.x versions of Firefox, I could click the "Add Exception" button to add an exception and continue to the site.

In 4.x versions of Firefox, the "Add Exception" button simply doesn't work. There is no way to add an exception from the "This Connection is Untrusted" screen.

Additional System Details

This happened

Every time Firefox opened

This started when...

I installed Firefox 4.0

Installed Plug-ins

none

Application

  • User Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.205 Safari/534.16

More Information

jscher2000
  • Top 10 Contributor
2369 solutions 20966 answers

This features still exists, but I wonder whether a setting might be blocking it. Are you saying that if you click the "Add Exception" button nothing happens, the dialog does not open? Or the dialog opens but it doesn't work?

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96862 answers

Helpful Reply

If you can't add an exception via the Error page then try to do that in the Certificate Manager.

  • Tools > Options > Advanced : Encryption: Certificates - View Certificates > Servers

Helpful Reply

When clicking the "Add Exception" button, literally nothing happens. No dialog or additional window opens. It is as if I had never clicked the button. I can click it 5,000 times and nothing happens.

Tino@TUG 0 solutions 1 answers

I tried this, but still wasn't able to add the exception (or get it to work correctly). Thank you though for the info.

gladson1976 0 solutions 2 answers

@ultrafox and Tino@TUG, you can try the method posted by @cor-el. It works perfectly for me

Question owner

The workaround may work, but the intended functionality for the screen is still broken.

Belgariad 0 solutions 1 answers

I agree. Having a workaround does not mean the feature is working. To me it is a bug and an annoying one, too.

jscher2000
  • Top 10 Contributor
2369 solutions 20966 answers

I would be annoyed, too. Can someone who has this problem test in Firefox's Safe Mode? If that works, then an add-on probably is causing the problem.

I recommend backing up your Firefox settings in case something goes wrong. See Backing up your information. (You can copy your entire Firefox profile folder somewhere outside of the Mozilla folder.)

Next, try starting Firefox in Firefox Safe Mode. Be careful not to "reset" anything permanently if you didn't back up.

Does the button work?

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96862 answers

It is possible that you can't add an exception if there are specific problems like in this case where there is a certificate that may have been valid in the past. You probably can't add an exception if the certificate has been revoked or otherwise got invalidated. Security gets stricter with every new Firefox version.

Question owner

Thank you for your continued assistance!

jscher2000: Even with a clean install in safe mode, this issue persists.

cor-el: The installation does not have any installed certificates.

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96862 answers

What is the exact error message that you get?

Does it say why the connection is untrusted?

Question owner

The message I see when visiting a site with an unknown certificate:


This Connection is Untrusted

You have asked Firefox to connect securely to [domain].com, but we can't confirm that your connection is secure. Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.

What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

Technical Details [domain].com uses an invalid security certificate.

The certificate is only valid for the following names: [otherdomain].com , [anotherdomain].com

(Error code: ssl_error_bad_cert_domain)

I Understand the Risks

If you understand what's going on, you can tell Firefox to start trusting this site's identification. Even if you trust the site, this error could mean that someone is tampering with your connection. Don't add an exception unless you know there's a good reason why this site doesn't use trusted identification.


Then there is the "Add Exception..." button, which doesn't work, as previously described.

Modified by ultrafox

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96862 answers

Who is the issuer of those certificates?

Question owner

I listed one example, but the feature never works for me in Firefox 4.

For that example, the certificate is issued by a trusted authority, but it is being used for other domains than what are registered. In Firefox 3, the certificate could be accepted anyway.

In another example, a self-signed certificate generated by a server-based application cannot be added as an exception in Firefox 4, while it can be added in Firefox 3.

There has been no example where the feature works for me.

jscher2000
  • Top 10 Contributor
2369 solutions 20966 answers

Could you look at one other thing, which is Firefox's Error Console (Tools menu). Click its Clear button to clear the list, then back in the page click the Add Exception button. Do you get any errors in the console there that might identify an issue?

(I get one when Firefox checks the certificate again after opening the dialog; it says its "Logged for information purposes only", so I don't think that is relevant.)

---

Does the "Get me out of here!" button work? My browser goes to about:home if I click that.

Modified by jscher2000

nchavan 0 solutions 1 answers

@jscher2000: I am running into same issue as mentioned above. As per your suggestion: Icleared the error console and tried launching the page again but no error is logged in the error console. Any other workaround?

Thanks!

jscher2000
  • Top 10 Contributor
2369 solutions 20966 answers

@nchavan, just to clarify your situation:

  • Add Exception button does not call up dialog, but you can add an exception manually (the long way) in Tools > Options > Advanced : Encryption: Certificates - View Certificates > Servers?
  • Does the "Get me out of here!" button work?
GilesGreen 0 solutions 1 answers

I had the same problem [Firefox 4.0.1, linux (Mandriva 2010.2) 64 bits]. The buttons were inactive, insensitive to the click, no error in console or firebug, etc. However starting the same firefox from a new, clean account, everything was ok. So one of the extensions I had was still messing with firefox. After trial and error it was Ant Video Downloader 2.3.0 Hope it helps. Giles

pbbob 0 solutions 1 answers

I have the problem as well.

All I am trying to do is log onto my Windows Home Server (WHS) at https://www.xxxxxxxxx.HpHomeServer.com. I get the dreaded "This connections is Untrusted" page, but it is not possible to add the site as an exception when I click on "Add Exception..." It says the site (www.HpHomeServer.com apparently) "provides valid verified identification. There is no need to add an exception" and so will not give me the option to add it. Going the log way to add it under Tools/... Certificate manager did not work either.

Other information:

If I change https://... to http://..., I can log on to the first page of the WHS, but going further changes the connection back to https:// and I am blocked.

BTW, I can easily add an exception with Internet Explorer 9 and access my WHS remotely.

This looks like a bug on FF 7.01 at least.

jscher2000
  • Top 10 Contributor
2369 solutions 20966 answers

@pbbob, there may be a way to import the certificate that the home server software created on the computer (or on the server, if you didn't install the software on this computer). Is there anything in your HP manual about importing certificates?