Firefox blocks all websites on school WiFi
Hey, I'm trying to use Firefox on a school internet connection and I'm getting the "Did Not Connect: Potential Security Issue" error on every site, including www.google.com. It connects on other WiFi connections and through chromium browsers (Ex. Brave). I've tried the following: - Set Proxy settings to "No Proxy" - Set "Enhanced Tracking Protection" to Standard - Disabled IPv6 in about:config - Set security.enterprise_roots.enabled to False - Logged into my Google account over a different connection - Allowed Windows single sign-on for Microsoft, work, and school accounts - Tried refreshing Firefox - Restarted my computer
The error is still occurring. Is there a way I can allow Firefox to connect normally over School WiFi?
==================================================================
ERROR CERTIFICATE HERE:
https://www.google.com/search?client=firefox-b-d&q=example
Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: false HTTP Public Key Pinning: true
Certificate chain:
BEGIN CERTIFICATE-----
MIIDjzCCAnegAwIBAgIHejiLAIJN+TANBgkqhkiG9w0BAQsFADCB1zELMAkGA1UE BhMCQVUxDDAKBgNVBAgTA0FDVDERMA8GA1UEBxMIQ2FuYmVycmExIzAhBgNVBAoT GkNvbnRlbnRLZWVwZXIgVGVjaG5vbG9naWVzMRowGAYDVQQLExFDb250ZW50S2Vl cGVyIFdlYjEyMDAGA1UEAxMpQ29udGVudEtlZXBlciBBcHBsaWFuY2UgQ0EgKDYx ODY2Nzg0OTg2NykxMjAwBgNVHRETKUNvbnRlbnRLZWVwZXIgQXBwbGlhbmNlIENB ICg2MTg2Njc4NDk4NjcpMB4XDTI0MDIxMTE3MDM1NVoXDTI0MDIyMDE3MDM1NVow GTEXMBUGA1UEAxMOd3d3Lmdvb2dsZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjrIjcc0kACwgtHnQao9UZ9MwFsdICJiWanGPsO4zzqUlliN+M L5ZF6UZ7TnpKTMdBBmohgXfCMFnsLBilFIgV/DA89Jk/thFIXj/RXaIihKn7q0mH 3OkxUNrsZ0SmGAaJBH9jmXC3+WTFP/HZQ/GMErs7nFTCHfE4sRhvdnZ+//c/Pywa PpkBI1JQJhmeWy5UB1PdcnFfcd4CdlMZvd2LM7IQYuvZQpAyDFSsict2dRf2FnOG f9uzAQQJd0s5sU9lOsD6P/LxWKU/RqwOPYx9/Lk/g2cX7+SYlbBmS4+CerO0a+Kg XBc8WgPRv3DMTSKLK2v3w/LNS0nJ7gKMau+3AgMBAAGjHTAbMBkGA1UdEQQSMBCC Dnd3dy5nb29nbGUuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBotm1oL7S/xmbCAcKZ qufi2SoBKd6xNndp4MLPLgV+Dq30NtF69nkmrHvGYl9sXE1bYsnGaHmiAJBf/HEx oNfEY/ziFqn59Ryd7Fwa03fPMhuRQJdfVgTgGdmxE6Z8b4s5eDZFoYoNQ0DFGq6c 4v1srnjfkGIokik+uwi5C46Dg0rHn/BPWkFhZ7bSQKV69vSJ1pofZol6ubMoWkaK LyNxQliqKQnUjdDNP/c4EIB/lsMaKlWfN26vzcLANwchtoZ/0m7H6qcNghe5BP2l 0Q70+nA4/746/2AXAfP5IkIRAHDvmDS6JYChuXZ9ybDziXgj/9740IsUQ4kTp2Z6 p0co
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIJAMzCdRH6uA8rMA0GCSqGSIb3DQEBCwUAMIHXMQswCQYD VQQGEwJBVTEMMAoGA1UECBMDQUNUMREwDwYDVQQHEwhDYW5iZXJyYTEjMCEGA1UE ChMaQ29udGVudEtlZXBlciBUZWNobm9sb2dpZXMxGjAYBgNVBAsTEUNvbnRlbnRL ZWVwZXIgV2ViMTIwMAYDVQQDEylDb250ZW50S2VlcGVyIEFwcGxpYW5jZSBDQSAo NjE4NjY3ODQ5ODY3KTEyMDAGA1UdERMpQ29udGVudEtlZXBlciBBcHBsaWFuY2Ug Q0EgKDYxODY2Nzg0OTg2NykwHhcNMTkwNzAxMDI1MzAzWhcNMjkwNjI4MDI1MzAz WjCB1zELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA0FDVDERMA8GA1UEBxMIQ2FuYmVy cmExIzAhBgNVBAoTGkNvbnRlbnRLZWVwZXIgVGVjaG5vbG9naWVzMRowGAYDVQQL ExFDb250ZW50S2VlcGVyIFdlYjEyMDAGA1UEAxMpQ29udGVudEtlZXBlciBBcHBs aWFuY2UgQ0EgKDYxODY2Nzg0OTg2NykxMjAwBgNVHRETKUNvbnRlbnRLZWVwZXIg QXBwbGlhbmNlIENBICg2MTg2Njc4NDk4NjcpMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArVs5X3wZbZAhKy/jHSoB1vHCdoK9JU6TLTOzMnuVneK3DRu1 doTTqIpdKTMUXjEkcihZoEqCQTpCAsUXLWpBELXJXgqYBhpHmjp3Wgis0brGgc28 WtMl17sYj5eAgMtcU1k+NWPiKKoSgH37/9UnXz+APZmx4d/eLpZAE6nFJCZgq0kB cRp6WTuLAsDqcXCV8g+3RPCqxLLa4AvdOcvZHux80em0nTNeoBcNiON8kWmZQcUl HD/2puJesD49Z6le9fakyR7vFkUhJ/mSbZ3fB4qfJcGw6Qq8I0IvD5dVqpqLVVlV kTBNxCdoGtH36aUzNjjCJS2o2piTrx0wqWnsCQIDAQABo4IBbDCCAWgwHQYDVR0O BBYEFMm17+/zw9LeACXRuD4EZ0ftMAPpMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYD VR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwICBDCCAQ4GA1UdIwSCAQUwggEB gBTJte/v88PS3gAl0bg+BGdH7TAD6aGB3aSB2jCB1zELMAkGA1UEBhMCQVUxDDAK BgNVBAgTA0FDVDERMA8GA1UEBxMIQ2FuYmVycmExIzAhBgNVBAoTGkNvbnRlbnRL ZWVwZXIgVGVjaG5vbG9naWVzMRowGAYDVQQLExFDb250ZW50S2VlcGVyIFdlYjEy MDAGA1UEAxMpQ29udGVudEtlZXBlciBBcHBsaWFuY2UgQ0EgKDYxODY2Nzg0OTg2 NykxMjAwBgNVHRETKUNvbnRlbnRLZWVwZXIgQXBwbGlhbmNlIENBICg2MTg2Njc4 NDk4NjcpggkAzMJ1Efq4DyswDQYJKoZIhvcNAQELBQADggEBAEWKXvkihQGpdDD9 q2eWUhFoS9M1wdlRIgXUcl3823xIVAcBLoBtTNB48PvHqfbwzwSbFjCKyZehs9A3 tWcVZStqHFOePyS6boffVAUgf20ms3ICZ8iD91nKNo6E7WxiOOl3JTgtyOA4lRTC peRj3rr1Y+1e3HWdKQACTr26nXsOfd2hRjiSI29BCCRDrFUmtPVFrK7c6tmhx4MN ZPpkWQ25wFLpj5TvRB0zf3TZvzzKr5lh6yuRoen8Jx8kvKPbpRpuUuQj+3HbV1bo tWkGFmd4Ug8YqUfUX5R+JMwGVzk7z6J/kxUGd8YNEmGlIR+gZWoKX/5x7SAlcpxI ts2dPqI=
END CERTIFICATE-----
所有回覆 (7)
The certificate issuer is "ContentKeeper Appliance CA" which sounds like a school network security device.
What if you start with an insecure URL in Firefox to see whether you can get redirected to a sign-in page. Does that work? For example:
http://www.msftconnecttest.com/redirect
or maybe
^ First link times out, ContentKeeper link can't be found. Tried it on a different browser and both work. They both work on Firefox on a different WiFi too.
由 Keenan Axolotl 於 修改
I misread your post earlier. You have security.enterprise_roots.enabled set to false? I think it needs to be set to true to trust fake certs signed by a cert stored in the Windows certificate store.
Alternately, you may be able to export/import the signing cert. I don't have a way to test it myself, but if you can export the certificate from another browser, then import it into Firefox:
- Open the Settings page
- In the tiny search box, slowly type cert to filter the page
- Click the View Certificates button to open the Certificate Manager
- Click Authorities to switch to the signing certificate list (if necessary)
- Click the Import... button and then point Firefox to the exported certificate
- Tell Firefox to trust the cert to identify websites
I can't remember whether you need to do this with one or the other of the two certs, or with both.
^ Any idea what the certificates are named? As in which do I export. I've exported a few from Brave but Firefox gives a popup saying it already has the certificate.
Judging from your original post:
Common Name (CN): ContentKeeper Appliance CA (618667849867)