Tìm kiếm hỗ trợ

Tránh các lừa đảo về hỗ trợ. Chúng tôi sẽ không bao giờ yêu cầu bạn gọi hoặc nhắn tin đến số điện thoại hoặc chia sẻ thông tin cá nhân. Vui lòng báo cáo hoạt động đáng ngờ bằng cách sử dụng tùy chọn "Báo cáo lạm dụng".

Learn More

We operate in a very restricted DNS environment and downloading sites with signed wildcard SSL is very slow so how do we disable all checks and keep HTTPS?

  • 2 trả lời
  • 3 gặp vấn đề này
  • 8 lượt xem
  • Trả lời mới nhất được viết bởi ELCV

more options

If we were using a self-signed certificate we could add an exception. But we use a DigiCert wildcard certificate. Our sites use a very restricted DNS with maybe a dozen URLs for which a name resolves to an IP. When Firefox is used to access our sites over HTTPS it is slow and often fails to load bu serving up error messages on the security of the site. I believe this is because it is looking to verify the certificate or revocation. We do not have this issue using HTTP. I have disabled "Query OCSP" but it has not helped.

Any assistance would be appreciated.

Thanks.

If we were using a self-signed certificate we could add an exception. But we use a DigiCert wildcard certificate. Our sites use a very restricted DNS with maybe a dozen URLs for which a name resolves to an IP. When Firefox is used to access our sites over HTTPS it is slow and often fails to load bu serving up error messages on the security of the site. I believe this is because it is looking to verify the certificate or revocation. We do not have this issue using HTTP. I have disabled "Query OCSP" but it has not helped. Any assistance would be appreciated. Thanks.

Giải pháp được chọn

So, I have a solution for this, but I don't consider it ideal.

Our certificate provider uses two URLs resolving to a single IP to validate certificates. Adding these records to our restricted DNS solves the problem. However, IPs addresses do change from time-to-time and each site would have to be updated should that happen.

Ideally, it would be nice if Mozilla would add a "trust" or whitelist option to Firefox.

Thanks.

Đọc câu trả lời này trong ngữ cảnh 👍 0

Tất cả các câu trả lời (2)

more options

I've called the big guys to help you. Good luck.

more options

Giải pháp được chọn

So, I have a solution for this, but I don't consider it ideal.

Our certificate provider uses two URLs resolving to a single IP to validate certificates. Adding these records to our restricted DNS solves the problem. However, IPs addresses do change from time-to-time and each site would have to be updated should that happen.

Ideally, it would be nice if Mozilla would add a "trust" or whitelist option to Firefox.

Thanks.