754450 - Firefox not accepting override for self-signed certificate on odd port

Status: NEW

(Core :: Security, defect)

Description

[Jared Wein [:jaws] (please needinfo? me)]

Attachment: Screenshot of bug

The following is from an email that I received:

I have one small complaint to send to you regarding Firefox accepting bad certificates on odd port numbers.  There doesn't appear to be a way to make it work right now but maybe there's a hidden configuration option I don't know about.  

I'm doing security testing and hooking Firefox up to burp suite as usual but the client's site runs over an odd port (2001).  I can't get Firefox to accept burp's invalid certificate when sites run over odd port numbers like this.   Screenshot attached.  

I was able to change my FF config so that the cert error page always allows you to add an exception (not that I couldn't also do so manually through options...) but I can't get to the actual site even if I add the exception.

Comment 1

[Matthias Versen [:Matti]]

dupe of bug 700837 ?