tags:

views:

4211

answers:

9

I am maintaining a few web applications. The development and qa environments use invalid/outdated ssl-certificates.

Although it is generally a good thing, that Firefox makes me click like a dozen times to accept the certificate, this is pretty annoying.

Is there a configuration-parameter to make Firefox (and possibly IE too) accept any ssl-certificate?

EDIT: I have accepted the solution, that worked. But thanks to all the people that have advised to use self-signed certificates. I am totally aware, that the accepted solution leaves me with a gaping security hole. Nonetheless I am to laze to change the certificate for all the applications and all the environments...

But I also advice anybody strongly to leave validation enabled!

+3  A: 

Instead of using invalid/outdated SSL certificates, why not use self-signed SSL certificates? Then you can add an exception in Firefox for just that site.

Forgotten Semicolon
+4  A: 

The better thing to do would be to get a free SSL cert for your dev and QA servers, and configure the developer's boxen to accept that cert authority.

Greg Hurlman
A: 

perhaps one of the security.warn options in about:config does what you are looking for.

sparkes
+2  A: 

I just use self-signed certs for my test servers, and then FF3 allows you to add an exception.

Eric Haskins
A: 

The MitM Me addon will do this - but I think self-signed certificates is probably a better solution.

palmsey
+2  A: 

Using a free certificate is a better idea if your developers use Firefox 3. Firefox 3 complains loudly about self-signed certificates, and it is a major annoyance.

rudle
+5  A: 

Go to Tools > Options > Advanced "Tab"(?) > Encryption Tab

Click the "Validation" button, and uncheck the checkbox for checking validity

Be advised though that this is pretty unsecure as it leaves you wide open to accept any invalid certificate. I'd only do this if using the browser on an Intranet where the validity of the cert isn't a concern to you, or you aren't concerned in general.

Dan Herbert
I'm confused: I can't find that option on FF2 or FF3. There is only an option to switch the use of OCSP. In what version of FF did see what you describe?
sleske
@sleske OCSP is how certificates are checked. Switching the use of this will turn on or off the check for certificates depending on what you prefer.
Dan Herbert
This seems like a Very Bad Idea.
Greg Hurlman
@Greg, I agree. I would definitely recommend your solution over mine as the correct practice.
Dan Herbert
A: 

For a secure alternative, try the Perspectives Firefox add-on

+2  A: 

Try Add Exception: FireFox -> Tools -> Advanced -> View Certificates -> Servers -> Add Exception.

henryc2323