522147 - Almost impossible to add self-signed certificates to exceptions

Status: RESOLVED DUPLICATE of bug 524500

(Firefox :: Security, defect)

Description

[Daniel]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.14) Gecko/2009090216 Ubuntu/9.04 (jaunty) Firefox/3.0.14
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.14) Gecko/2009090216 Ubuntu/9.04 (jaunty) Firefox/3.0.14

A bad (in this case self-signed) ssl certificate results in an error message with no immediate way to add an exception. 

Going to Preferences > Advanced > Encryption > View Certificates > Add Exeption > and typing in https://localhost and clicking view results in the same error message and blocking of the SELF-SIGNED certificate on MY OWN server in spite of the fact that I'm adding the site to the list of EXCEPTIONS.

Not allowing the user to add it to exceptions from the initial error message is obnoxious enough, but to get into an "add exceptions" menu and still be blocked by firefox for downloading YOUR OWN CERTIFICATE is the exact contradiction of user-friendly.

There are similar views voiced on web blogs dating back to at least March, and this is an up to date copy of mozilla firefox.

Reproducible: Always

Steps to Reproduce:
1.Attempt to add any self-signed certificates, bonus points if you set up webmin and try to connect yourself on localhost.


Expected Results:  
The ability to click View Certificate, receive the certificate, and then click Add Exception as is available in other web browsers AND I believe windows version of firefox.

Marked as major because 2 of the workarounds I read result in the same error message and the inability to download the certificate, as well as the ADD EXCEPTION menu being unable to add exceptions defeating the purpose of such a menu.

If this was filed before, sorry, but it also doesn't seem to have been addressed so I may as well bring it up again.

Comment 1

[Bitt Faulk]

Attachment: Untrusted Connection

Screenshot of denial to access HTTPS site with self-signed cert.

Comment 2

[Bitt Faulk]

Attachment: Add Security Exception

Screenshot of window denying exception: "This site provides valid, verified identification.  There is no need to add an exception."

Comment 3

[Bitt Faulk]

Attachment: Certificate that caused the problem in screenshots 417695 and 417696

Certificate that caused the problem in screenshots 417695 and 417696