3

Since it's not a wise thing to add a self-signed HTTPS cert as a CA to Firefox, my question is: How can I add a self-signed certificate to Mozilla Firefox? (not as a CA). So that I will not be warned when I visit that given HTTPS site, but I will be still protected from MITM attacks, since the HTTPS cert is stored in my browser.

UPDATE: Thanks for the answers, but I cannot make the exception adding permanent. Why is this?

enter image description here

I'm using Firefox 30 on an Ubuntu 12.04/32bit

1

Use the "Add an exception" button.

0

I only know of two ways to avoid the cert error upon visit:

The first way would be to create an exception in FF for this site. The downside to this is that MITM attacks could be performed on this site outside your purview.

The other option, which you don't seem keen on is adding your own generated and self-signed CA in the CA list. Given that you take care of your personally-generated CA, I do not see too high of a risk for doing this. Please do note that I would not do this if the site you are trying to sign is an RSA server or something of grave security importance.

If the cert error is of extreme annoyance and the two options above are not acceptable, you may consider buying a cheap SSL cert from GoDaddy or your entity of choice. Granted it won't be as secure as a Verisign cert, but it's something from a CA (disliked as they may be) that should be trusted by your browser by default. If you have several sites you need to secure in the same domain, but limited liquid assets, you may want to seek out a wildcard cert. A wildcard cert is a SSL cert that will allow you to sign all sites that are under the same domain with the same certificate. Here's the Wikipedia article for Wildcard Certs: http://en.wikipedia.org/wiki/Wildcard_certificate

2
  • 1
    Firefox exceptions record the certificate, so MITM attacks are impossible after the exception has been added once. – user1686 Apr 21 '14 at 18:27
  • @grawity - So every time the cert changes for a site that has an exception in place, the user will receive the cert error? Interesting. Huh, you learn something new every day! Thanks for that clarification. – PTW-105 Apr 21 '14 at 18:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.