I have a Windows 10 computer that operates usually without an internet connection. I have an Apache server (version
2.4) that runs on that machine (
ServerName localhost), and it virtually hosts various websites (e.g.,
www.youtube.com - I know...humor me). There are several domains, but I'll use that one as my example.
I resolve these domains to
127.0.0.1 in the
%WINDIR%\system32\drivers\etc\hosts file and I can resolve/ping them just fine.
I have defined
www.youtube.com as a
httpd.conf and I've defined it as a domain in an SSL config file, as well. A few months ago, this all worked fine, i.e., in Firefox I was able to browse http://www.youtube.com AND https://www.youtube.com just fine. For the https version of the sites, I did have to create self-signed certificates, and install them to Firefox's cert db, but it all did work.
Well now it doesn't work anymore. I'm running Firefox version
57.0.1 (32-bit). I get this error we've all seen:
Your connection is not secure
The owner of [DOMAIN] has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.
This site uses HTTP Strict Transport Security (HSTS) to specify that Firefox may only connect to it securely. As a result, it is not possible to add an exception for this certificate.
And when I click Advanced...
[DOMAIN] uses an invalid security certificate.
The certificate is not trusted because it is self-signed.
Error code: SEC_ERROR_UNKNOWN_ISSUER
I have tried so many solutions...generating new certs, disabling Firefox's
Query OCSP responder servers to confirm the current validity of certificates setting, clearing cache, starting Firefox with a new profile, deleting the
cert8.db file, using the Windows trust store instead, trying to fudge with
about:config and changing
security.* settings, etc. but nothing has worked.
I know it is insecure what I want..but not really, b/c this computer does NOT connect to the internet, I just want to connect to my "fake" domains that my own Apache server is hosting locally.
Is this truly impossible?
FWIW, I've tried Chrome, and it doesn't work either, but I'd rather stick w/Firefox anyway.