90.0.2: Did something change with handling of expired certs?
A cert on an application we mange expired. OK. So I went to that site knowing I would have to tell FF to accept the cert even though it expired. However, I couldn't find anything under 'advanced' to accept the cert. This is with 90.0.2. Did something recently change where that's no longer allowed?
I had to resort to using a different browser so I can access the app to install a new cert.
All Replies (1)
I don't think that Firefox has ever allowed to override an expired certificate. In the past you probably could connect via http:// in such a case, but in current releases this is no longer possible due to forcing https:// via HSTS or HTTPS-Only in Firefox.
If there is a new certificate installed on the server and Firefox insists to use the expired certificate then you can check this certificate in the the certificate manager.
- Settings -> Privacy & Security
Certificates -> View Certificates -> Authorities