Project

General

Profile

Firefox: How to handle invalid security certificates ?

When accessing for the first time Community Single Sign-On (CSSO) enabled web sites like

depending of the version installed, the Firefox browser will certainly present you one of the following messages.

  • Firefox 3.5

[!wikiFirefoxInvalidSecurityCertificateFirefox35-ConnectionUntrustedpng|align=center!]

  • Firefox 3.0

[!wikiFirefoxInvalidSecurityCertificateFirefox30-SecurityConnectionFailedpng|align=center!]

If you want to avoid these messages in the future, the following instructions will prevent Firefox from raising those messages.

Firefox 3.5

  • Click on the link I Understand the Risks

[!wikiFirefoxInvalidSecurityCertificateFirefox35-ConnectionUntrustedpng|align=center!]

  • Push the button Add Exception

[!wikiFirefoxInvalidSecurityCertificateFirefox35-ConnectionUntrusted-AddExceptionpng|align=center!]

  • The certificate presented by the server will automatically be downloaded from the server

  • Push the button View

[!wikiFirefoxInvalidSecurityCertificateFirefox35-AddSecurityException-Viewpng|align=center!]

Go ahead to the instructions given at All versions.

Firefox 3.0

  • Click on the link "Or you can add an exception"

[!Firefox30-SecurityConnectionFailedpng|align=center!]

  • Push the button Add Exception

[!Firefox30-SecurityConnectionFailed-AddExceptionpng|align=center!]

  • Push the button Get Certificate to get the certificate presented by the server

[!Firefox30-AddSecurityException-GetCertificatepng|align=center!]

  • Push the button View to inspect the presented certificate

[!Firefox30-AddSecurityException-Confirmpng|align=center!]

Go ahead to the instructions given at All versions

All versions

  • In a second browser window, open the EDIT WP 5.7 Certification Authority page and look for the SHA-1 and/or MD5 fingerprint of the server you currently wanted to access (e.g. idp.e-taxonomy.eu)

[!Firefox35-IdPFingerprintpng|align=center!]

  • Back to the Certificate Viewer dialog of Firefox, look for the SHA-1 and MD5 fingerprints below the Fingerprint header

  • Compare these values whith those found on the EDIT WP 5.7 Certification Authority page

  • Push the button Close

[!Firefox35-CertificateViewer-Closepng|align=center!]

Note: Proceed only, if the fingerprints are identical. Otherwise, inform the editsupport@bgbm.org EDIT Support Team immediately !

  • Verify, that the radio button Permanently store this exception is selected, if you don't want to be alerted for this server anymore

  • Push the button Confirm Security Exception

[!Firefox35-AddSecurityException-Confirmpng|align=center!]

[!Firefox35-EDITFederation-Loginpng|align=center!]

Firefox35-AddSecurityException-View.png View (12.6 KB) Lutz Suhrbier, 07/16/2009 11:27 AM

Firefox35-CertificateViewer-Close.png View (14.4 KB) Lutz Suhrbier, 07/16/2009 11:27 AM

Firefox35-ConnectionUntrusted.png View (10.3 KB) Lutz Suhrbier, 07/16/2009 11:27 AM

Firefox35-ConnectionUntrusted-AddException.png View (15.5 KB) Lutz Suhrbier, 07/16/2009 11:27 AM

Firefox35-EDITFederation-Login.png View (47.5 KB) Lutz Suhrbier, 07/16/2009 11:28 AM

Firefox35-IdPFingerprint.png View (26.6 KB) Lutz Suhrbier, 07/16/2009 11:28 AM

Firefox30-AddSecurityException-Confirm.png View (16.4 KB) Lutz Suhrbier, 07/16/2009 07:16 PM

Firefox30-AddSecurityException-GetCertificate.png View (13.5 KB) Lutz Suhrbier, 07/16/2009 07:17 PM

Firefox30-SecurityConnectionFailed.png View (16.4 KB) Lutz Suhrbier, 07/16/2009 07:17 PM

Firefox30-SecurityConnectionFailed-AddException.png View (19.9 KB) Lutz Suhrbier, 07/16/2009 07:17 PM

Firefox35-AddSecurityException-Confirm.png View (12.7 KB) Lutz Suhrbier, 07/20/2009 02:48 PM

Add picture from clipboard (Maximum size: 40 MB)