搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

Learn More

Firefox 4.0 and 4.0.1 can NOT handle multiple user certificates for a secure site (Firefox 2.x.y and 3.x.y CAN!!!)

  • 7 个回答
  • 177 人有此问题
  • 35 次查看
  • 最后回复者为 tuturutko

more options

When you access a secure site with a user certificate Firefox 4.0 and 4.0.1, fail and the server says:


Secure Connection Failed An error occurred during a connection to www...com (Error code: ssl_error_renegotiation_not_allowed) The page you are trying to view can not be shown because the authenticity of the received data could not be verified. Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.


The problem is not the site, Firefox 3.x.y works perfect!, it ask the user for the Master Password and then to select which one of the certificates must be used (also ask if this decision will be permanent until Firefox Exit, this allow the user NOT to answer this certificate question every time a negotiation start with the server).

This is obviously a BUG (an awful one), because security should be a priority (if not, you can use Microsoft Explorer)

由fgil于修改

被采纳的解决方案

No, it is not a bug, but it is a fixed bug about a security issue that should fixed on web servers. Firefox 4 doesn't allow this anymore.

See:


You can look at the pref security.ssl.renego_unrestricted_hosts on the about:config page and add the sites that you want to allow to the string value.

To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website.
If you see a warning then you can confirm that you want to access that page.

在上下文中阅读这个答案 👍 5

所有回复 (7)

more options

选择的解决方案

No, it is not a bug, but it is a fixed bug about a security issue that should fixed on web servers. Firefox 4 doesn't allow this anymore.

See:


You can look at the pref security.ssl.renego_unrestricted_hosts on the about:config page and add the sites that you want to allow to the string value.

To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website.
If you see a warning then you can confirm that you want to access that page.

more options

Thanks!!!, I see, there is a problem with the old SSL/TLS protocol version that allow a man in the middle attack if renegotiation is active, is not a problem managing the certificates.

thank you again.

more options

You're welcome

more options

So......how do I -FIX- this? my bank won't let me see my account information anymore because of this $%#@ing problem!

more options

On the about:config page, at the pref security.ssl.renego_unrestricted_hosts you can make a double-click and type the web adresses separate by commas (www.adress1.com,www.adress2.fr,...) you want to allow. I've tested it and it works.

由jim7963于修改

more options

Hi, i have this problem to, but i have a terminal server and i want to make a changes to all users. Where have to make these changes? I forgot to say the i use Mozilla Firefox 5.0

Thank you in advance.

由tuturutko于修改

more options

Nice, what a great forum 1 week and no answer. Good job.