tags:

views:

3540

answers:

5

i.e. I just want them to be permanently accepted all the time.

A: 

I think you need to get the certificate issued by a "root certificate authority" that the browser will know in advance, e.g. Verisign.

http://www.verisign.co.uk/ssl/ssl-information-center/

There's other suppliers too. Trail ones available here....

http://www.geotrust.com/

Good description of the issue and what might work best for you depending on your requirements here...

http://www.boutell.com/newfaq/creating/whichcert.html

cagcowboy
+2  A: 

You need to import the certificate issuers certificate so that any other certs. issues by that issuer don't give this warning.

In firefox go to: prefs advanced encryption view certificates authorities and then click import

If you have a root certificate for your issuer you can import it here and never see that error again.

reefnet_alex
Won't this just work on that specific Firefox install?
cagcowboy
that's correct. nothing in the question suggests that the questioner is looking for anything more thant that. obviously having a valid certificate issued by an approved authority as you suggest won't be subject to the same problem but may well not be what the questioner was after
reefnet_alex
+3  A: 

No, you cannot. Other people answering this question, please read it more closely. He wasn't asking how to add an exception, or fix a broken certificate. He wanted to TURN OFF THE CHECK COMPLETELY.

The Mozilla people erred on the side of caution by making this impossible. On the one hand it's annoying, but on the other hand, their security mindset is one of the reasons Firefox is so much safer than IE.

If you want to make exceptions just a little bit easier, type "about:config" in the address bar (no quotes), and type browser.ssl_override_behavior into the Filter, double-click the "Value", and change it to "2". Now exceptions require one less click.

+1  A: 

check out the perspective firefox addon. It makes firefox 3 automatically accept self-signed certificates.

http://www.cs.cmu.edu/~perspectives/

Christopher Mahan
A: 

Here's the answer!

* Tools -> Options -> Advanced -> Encryption -> View Certificates
* Under Authorities tab, enter "RSA Security 1024" in the Search textbox.
* Select RSA Security 1024 V3 and press the Edit button.
* Uncheck all three options
* Press OK and close out the rest of the dialogs. 

The certificate authority won't be trusted for anything, and so have been effectively disabled.

The certificate authority is not unknown or in malicious hands or anything, its just not in use and hasn't been audited. See http://blog.mozilla.com/security/2010/04/06/removing-the-rsa-security-1024-v3-root/

Doug K