1160575 - Add Security Exception no longer works properly

Status: RESOLVED INCOMPLETE

(Core :: Security: PSM, defect)

Description

[Howard Davis]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
Build ID: 20150415140819

Steps to reproduce:

Try to go to https://192.168.1.1 so I can change the setting on my Juniper router


Actual results:

I get a message saying "This Connection is Untrusted" and after I answer "I Understand the Risks" -> "Add Exception" it does not do anything.  Clicking on "Add Exception" does not clear the dialog and does not an an exception.


Expected results:

The exception should have been added and I should have been allowed to view the configuration page on my Juniper router.

Comment 1

[Matthias Versen [:Matti]]

What is the error message under "technical details" in the "connection is untrusted" page ?
Can you add an exception if you visit https://cacert.org ?

Is this a new issue with Firefox37 and did it work in Firefox36 ?
Does it work if you run Firefox in the Firefox safemode ?
- https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode

Comment 2

[Howard Davis]

I discovered I could no longer access my router using Firefox to update the settings a couple of months ago.  I assumed that the problem with the "Add Exception" button was a serious bug in Firefox and that it would be fixed if I just waited a while.  I haven't had a critical need to update my router settings until today so I had been ignoring the issue and just waiting for a fix to show up.  Today I had to access my Juniper router to change the firewall rules (because an ISP renumbered their network) so I started investigating this "Add Exception" issue further and found that there are many other people also reporting that the Firefox "Add Exception" button is not working, and that despite so many people having the problem it apparently still has not been fixed.

I followed the instructions that you sent in the post above to restart Firefox in safemode.  I tried to access my Juniper router IP address at https://192.168.1.1 while in safe mode.  The "Add Exception" button is still non-responsive while in safe mode.  It does not close the dialog and it does not add an exception.

Comment 3

[Howard Davis]

Under "This Connection is Untrusted" -> "Technical Details" I see the following:

   An error occurred during a connection to 192.168.1.1.
   Peer's Certificate issuer is not recognized.
   (Error code: sec_error_unknown_issuer)

When I go to https://cacert.org then I see a different message under "This Connection is Untrusted" -> "Technical Details" which is the following:

   cacert.org uses an invalid security certificate.
   The certificate is not trusted because the issuer certificate is unknown.
   (Error code: sec_error_unknown_issuer)

I AM able to add an exception for https://cacert.org, but I am NOT able to add an exception for https://192.168.1.1

Comment 4

[Matthias Versen [:Matti]]

Does it work with a new Firefox profile ?
- https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles

Comment 5

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Does it work in Beta? If so, it might be bug 1123671. It might also be bug 1148766.

Comment 6

[Howard Davis]

(In reply to Matthias Versen [:Matti] from comment #4)
> Does it work with a new Firefox profile ?
> -
> https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-
> firefox-profiles

I created a new profile and tried it but the Add Exception button still does not work.

When I went to http://192.168.1.1 it did a redirect to http://192.168.1.1/redirect.html and then was just stuck there with the page load icon circling but a page never loaded.  When I went to https://192.168.1.1 then it showed the "This Connection is Untrusted" page where the "Add Exception" button does not work.  After going to the https URL I tried the http URL again and this time it did complete the redirect to https://192.168.1.1 and showed the "This Connection Is Untrusted" page.  So visiting the https URL changed something which allowed it to complete the redirect from the http URL to the https URL the next time I tried it.

Comment 7

[Howard Davis]

Because I had to update my Juniper router firewall rules I ended up having to install the Google Chrome browser.  In the Google Chrome browser when I go to https://192.168.1.1 I see a message saying "Your connection is not private". When I click "Advanced" -> "Proceed to 192.168.1.1 (unsafe)" it brings up the Juniper router configuration page just fine.  Using Google Chrome I was then able to update my router settings without any other issues.

Comment 8

[Howard Davis]

The version of Firefox I am using on my Ubuntu server is 37.0.2

Comment 9

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Is this still an issue?