How to script the add certificate exception in Firefox 32.0.2 ?

Hi,
I meet some issues with the Firefox certificates management. Here is my context:
- Firefox v32.0.2 on Windows 7 32 bits
- a self-signed certificate created with OpenSSL 32 bits
- Firefox and self-signed certificate have been deployed on 11000 workstations with some automated process (scripts).
The self-signed certificate is used to securize data flows with https protocol between two WebServices and different applications. There is no security problem with Internet Explorer, Safari, Chrome.
I have already deployed and installed the self-signed certificate with an Microsoft Active Directory GPO (there is an addon GPO for FireFox) and it is OK
Issue:
When the application WebService calls Firefox, a message indicates to the users that the connection can't be certified and ask them to add an exception.
the WS URL is appeared and the users must click on "Confirm security exception" (the checkbox "Conserv this exception permanently" must be checked)
It is a bit "dangerous" to let the users with these different choices and this is not very friendly.
So, I want to create a script which automates all these manipulations and deploy this script with a GPO.
Is it possible ? How can I script this certificate exception and the different choices?
Thanks a lot by advance for your help
Best regards
Yanolezard

This is not the GPO approach but an alternative: [https://support.mozilla.org/en-US/questions/984237]
Other resources:
*[http://mbrownnyc.wordpress.com/2013/06/04/leverage-group-policy-to-manage-certificates-in-users-firefox-certificate-store/]
*There are also a number of admins that answer questions on their mailing list for the ESR (enterprise) version of Firefox. [https://www.mozilla.org/en-US/firefox/organizations/]

Similar Messages

  • C Stamp On the "Add certificate Exception" warning, what to check to keep Thunderbird's security default: "Confirm security exception" or "Cancel?"

    When the dialog box "Add certificate exception" comes up with the warning "You are about to override how Thunderbird identifies this site," which is the safe box to check?
    I want to stay with Thunderbird's security system. Do I check "Confirm Security Exception" or "Cancel"?

    Unfortunately, some sites do not maintain their certificates properly. So basically if you trust the site, you can confirm the exception. If it is an unknown site or you are not sure about it, then Cancel. Of course if you don't confirm the exception, you won't be able to see/use the site.

  • Can't add a certificate exception in Firefox 4.0, relevant buttons are disabled

    I try to access a web site from a local network via HTTPS. The web server uses self-signed certificates, and Firefox presents a common "This connection is untrusted" window.
    In version 3.x I simply clicked "Add Exception", and then "Confirm Security Exception". In Firefox 4.0, when I click "Add Exception", I see:
    # "This site provides valid, verified verification. There's no need to add an exception".
    # The "Permanently store this exception" checkbox and the "Confirm Security Exception" button are disabled.
    I cannot access this protected site anymore. Any suggestions?

    There seems to be a work around to add exception.
    You have to manually go to Tools -> Options -> Advanced -> View Certificates -> Servers -> Add Exception
    Then the "Add Certificate Exception" window comes up. Just enter the URL at location https:// and click "Get certificate". Then "Add Security Exception".
    This will allow you to access the site thereafter.
    I'm not sure though why "Add Exception" button under the "I understand the rsiks" page does not work. May be a bug.

  • How to Disable the Add & Review Button

    How to Disable the Add & Review Button
     *Updated with the correct ISF  code (the previous code, in case you saved it, was to actually  escape apostrophes.  That will be posted  seperately. 
    Note that this solution might not work in your environment - you might have to modify it based on your installation.
    Enjoy! 
    Common_disableAddAndReviewButton()
       if ( Moment == 'ordering' )
            var theForm = document.forms[0];
            var buttonCt = 0;
            for( i = 0; i < theForm.elements.length; i++ )
                 if( theForm.elements[i].type == "submit" )
                    if ( buttonCt == 0 || buttonCt == 2 )
                        theForm.elements[i].disabled = true;
                         theForm.elements[i].style.visibility="hidden";                  
                     buttonCt++;              

    This is GREAT - I added a new Java Script and set it to "when form is loaded" and when I did some test reqs - no Add & Review button !!!!

  • How to use the validations and exceptions  in BPEL

    Hi,
    How to use the validations and exceptions in BPEL.
    pls provide one sample example to give the exceptions and validations in BPEL

    Hi,
    For example you can create a simple BPEL Process and you can throw an error during running process. If input data is not valid and format is not correct you can throw error using throw activity and using catch activity you can catch particular error. The catch-all will handle all the error occurred with the scope.
    you can also refer faulthandling section in the link for more information related to exception handling.
    http://download-west.oracle.com/docs/cd/B31017_01/integrate.1013/b28981/faults.htm#sthref1188
    Regards,
    Deepa

  • How to catch the user defined  exception in application service

    Hi All,
    How to catch the user defined  exception in application service  when it is throwed by the external service..
    Regards,
    Thirumurugan.

    Hi,
        Thanks for your reply,
            Actually I  am calling validate Login method of External service from the application service. When the login fails, my external service will throw user defined Exception.I want to catch the user defined Exception.
        But in the application service , validate Login method can catch  only Invocation Exception and Engine Exception.
       These two exception are present in the Application service remote interface.
      public com.sap.comptest.extsrv.accrjavawsvi__document.output.
    Ns1_validateLoginResponse validateLogin(com.sap.comptest.extsrv.accrjavawsvi__document.input.Ns1_validateLogin input) throws com.sap.caf.mp.base.exception.InvocationException, com.sap.caf.mp.base.exception.EngineException;
    User defined exception is not present there. When i include the webservice as external service in CAF, it suppossed to generate the java file for the custom exception of validate Login method and this generated file should be included in the application service remote interface..
    public com.sap.comptest.extsrv.accrjavawsvi__document.output.
    Ns1_validateLoginResponse validateLogin(com.sap.comptest.extsrv.accrjavawsvi__document.input.Ns1_validateLogin input) throws com.sap.caf.mp.base.exception.InvocationException, com.sap.caf.mp.base.exception.EngineException,
    (generated file name of user defined Excpetion.
      Then only  validate login method  of application service can catch  the user defined Exception which is thrown by the  external service.
    regards,
    Thirumurugan.p

  • How to define the Webservices in except through WebDynpro.

    Hi friends,
                     Can anyone tell me about how to create the webservices?[ except in Webdynpro.].
      We want to give the input data as userdefined way, not in a file. can u tell me how to proceed ?

    Hi,
    Creation of webservice in XI
    Step 1:
    Create the DT,MT & MI(Synch/Asynch-outbound/Inbound)
    step2
    Create webservice for sender ( Integration Directory ->tools ->define webservice.
    It will generate the webservice and save it as .wsl file.
    " Award points if helpful"
    Regards,
    Jayasimha Jangam

  • How to renew the expired certificate of workflow manager in sharepoint 2013?

    Dear All,
    How to renew the expired certificate of workflow manager in sharepoint 2013 and what all steps needs to be done inorder the workflow to work properly.
    Thanks & regards,
    Asha

    Hi Asha,
    This should help you
    https://social.technet.microsoft.com/Forums/sharepoint/en-US/bfd3c92b-1a05-4cc5-9b90-8c5c8877dd2c/changing-expired-certificate-for-sharepoint-2013-workflow-manager?forum=sharepointadmin
    Please remember to click 'Mark as Answer' on the answer if it helps you

  • How to Script the "Upgrade Database" button in Configuration manager?

    Hi
    We want to automate the cloning process of the test env. to the dev. env. only problem is that the DBA is testing newer CU on dev, which means that we have to push the "Upgrade Database" button in configuration manager each time... any good solution
    to this?
    in short:
    How to Script the "Upgrade Database" button in Configuration manager?
    thanks!
    MM

    MM, is this still an issue?
    Thanks!
    Ed Price, Azure & Power BI Customer Program Manager (Blog,
    Small Basic,
    Wiki Ninjas,
    Wiki)
    Answer an interesting question?
    Create a wiki article about it!

  • I need to know how to delete the most recent version of Firefox. I JUST downloaded it tonight and my computer doesn't have that little edit bar to work with so I can download the proper Adobe player and my internet has been screwed up ever since I downlo

    I need to know how to delete the most recent version of Firefox. I JUST downloaded it tonight and my computer doesn't have that little edit bar to work with so I can download the proper Adobe player and my internet has been screwed up ever since I downloaded the new version of Firefox. I just want the old version of it back since I apparently can't download the Adobe stuff that is necessary to keep my computer safe from Hackers. It sure would have been nice to know there was an issue with the new Firefox Update BEFORE I uploaded it. I have Vista which is usually an issue with both Adobe and Firefox. I don't seem to be able to run much of Adobe at all on my computer because of the Vista.
    == This happened ==
    Every time Firefox opened

    I have also noticed all my settings won't stay set, example....I removed the check mark from "third party cookies", the when I close Firefox and reopen the check mark is back, also my tool bar has screwed up....can't reset, been having trouble the up grade.

  • How to hide the Add-on panel from a script

    Good day
    I've installed an Add-on on my PowerShell ISE.
    I activate the add-on by 
    Import-Module c:\ps1\Modules\VariableExplorer\VariableExplorer.psm1
    im my Profile
    A minor annoyance is that the adds-on panel gets shown. 
    i have to press Alt+Shift+V in order to hide the adds-on panel.
    I'd like the panel remain hidden even when i activate the add-on.Maybe i activate the add-on incorrectly, then pls share a correct way of activating an add-on.
    Or there is a command that i can put in the profile.ps1 in order to hide the adds-on panel.
    Regards
    Kamil

    Perhaps this may help
    https://msdn.microsoft.com/en-us/library/dd878350(v=vs.85).aspx
    M.

  • Can't add a certificate exception in Firefox 4.0 - "add exception" button do nothing

    I am opening web site with untrusted certificate. I would like to accept this certficate, so I click "Add exception" button. Unfortunately, confirmation dialog do not show up. In fact nothings happends. This problem is relevant to all websites with untrusted certificates.

    Going through the preferences to add a certificate is a workaround and not intuitive to users. The Add Exceptions button used to bring up a popup in Firefox version 3.5.9 that allowed you to add an exception for the server:port in my case. Is there a way to get the Add Exception button to work in Firefox version 3.6.12, it currently does nothing which is totally confusing to the user.

  • How to script the discovery of installed SAP instances (Windows)?

    Hi,
    I manage like two dozen of servers, some of which are pure sandboxes for Basis Persons. I sometime come over and discover a Java add-on to an existing ABAP instance, a new instance running...
    I have followed the many threads about scripting shutdown & startup of known instances and it's quite easy to do. I initially made some scripts on each server to address the installed instances, but as they change, it pretty much forces me to go back and adjust.
    There must be a simpler way!
    So I want to discover all the running SAP instances (SID) on a given server, then the system numbers attached to any existing SID. Once I can query this on a server, I will be able to stop all SAP instances properly.
    So how do you script the discovery of installed SAP instances (SID) and their respective components (instance 0, 1, ...)?
    For the record, I use Windows shutdown scripts to systematically run a script that stops SAP instances, so my Windows Admin friends can reboot the servers without concern. I use a conditional Windows startup script to start all SAP instances when Windows starts, only if we want it to (i.e. planned maintenance is a good idea to want SAP to start automatically, all other reboot is definitly not a good idea).

    Install something like Belarc Advisor and parse the resulting HTML

  • How to get the ssl-certificate trusted on lion-server

    I'm in the process of setting up lion server to create a small (international) research group collaborating on a project.
    So I want to use the server to exchange data, use a common calendar, address-book etc.
    To do so you need to get a SSL-certiifcate (unless you do everything on VPN).
    So I selected the server in server.app (Hardware) and selected SSL certificate edit
    created a certificate signing request that I exported and saved on my computer
    I received a ssl.crt that I also saved and dragged into the window and replace the original certificate with the signed one
    and also imported the certificate in to the keychain
    All following the steps described in:
    Managing iOS deviceswith OS X Lion Server by Arek Dryer
    the book describes that the certiifcate should now be trusted and valid. However, I keep the message "This certificate was signed by an unkown authority"
    So I somehow did something wrong.
    Any suggestions what I should do?

    ok let me add some info in the hope I will get some guidance:
    using the site http://www.sslshopper.com/ssl-checker.html
    I was able to check on the status of the certificate:
    The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. Learn more about this error. The fastest way to fix this problem is to contact your SSL provider.
    since it is a non-commercial server I used a 'free?' SSL-certificate provider that will charge you when you contact them, so you have to figure it out by yourselve
    I guess I would be helped if there is a step by step manual how to install a root certificate

  • How do I delete Add Security Exceptions popup box

    I changed the port for my gmail account which I read in Thunderbird in error and now get the popup Add Security Exception which states "You are about to override how Thunderbird identifies this site. I don't want to override this! just get rid of popup.

    I've done the same thing, and can't pick up my email in Thunderbird without addressing the pop-up. How do I re-do everything and get Gmail into Thunderbird correctly? Thanks!

Maybe you are looking for