MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED workaround for intranet
On their help page, under the caption Bypassing the warning, Mozzila has the following box:
Note: Some security warnings cannot be bypassed.
This seems to be the case of the certificate that an intranet site uses. I need to access this page to work (it's a bug tracker).
This is the explanation Firefox shows for the error:
xxxxxxx uses an invalid security certificate.
Certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and
VeriSign are no longer considered safe because these certificate
authorities failed to follow security practices in the past.
Error code: MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED
I understand the need for this warning, but I do not understand why I cannot bypass it. Without it, I can't work.
Is there a hidden setting to ignore any certificate error?
firefox security ssl certificate
asked Jan 16 at 17:56
Tomáš ZatoTomáš Zato
1,31373157
add a comment |
On their help page, under the caption Bypassing the warning, Mozzila has the following box:
Note: Some security warnings cannot be bypassed.
This seems to be the case of the certificate that an intranet site uses. I need to access this page to work (it's a bug tracker).
This is the explanation Firefox shows for the error:
xxxxxxx uses an invalid security certificate.
Certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and
VeriSign are no longer considered safe because these certificate
authorities failed to follow security practices in the past.
Error code: MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED
I understand the need for this warning, but I do not understand why I cannot bypass it. Without it, I can't work.
Is there a hidden setting to ignore any certificate error?
firefox security ssl certificate
asked Jan 16 at 17:56
Tomáš ZatoTomáš Zato
1,31373157
add a comment |
On their help page, under the caption Bypassing the warning, Mozzila has the following box:
Note: Some security warnings cannot be bypassed.
This seems to be the case of the certificate that an intranet site uses. I need to access this page to work (it's a bug tracker).
This is the explanation Firefox shows for the error:
xxxxxxx uses an invalid security certificate.
Certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and
VeriSign are no longer considered safe because these certificate
authorities failed to follow security practices in the past.
Error code: MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED
I understand the need for this warning, but I do not understand why I cannot bypass it. Without it, I can't work.
Is there a hidden setting to ignore any certificate error?
firefox security ssl certificate
asked Jan 16 at 17:56
Tomáš ZatoTomáš Zato
1,31373157
On their help page, under the caption Bypassing the warning, Mozzila has the following box:
Note: Some security warnings cannot be bypassed.
This seems to be the case of the certificate that an intranet site uses. I need to access this page to work (it's a bug tracker).
This is the explanation Firefox shows for the error:
xxxxxxx uses an invalid security certificate.
Certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and
VeriSign are no longer considered safe because these certificate
authorities failed to follow security practices in the past.
Error code: MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED
I understand the need for this warning, but I do not understand why I cannot bypass it. Without it, I can't work.
Is there a hidden setting to ignore any certificate error?
firefox security ssl certificate
firefox security ssl certificate
asked Jan 16 at 17:56
Tomáš ZatoTomáš Zato
1,31373157
asked Jan 16 at 17:56
Tomáš ZatoTomáš Zato
1,31373157
asked Jan 16 at 17:56
Tomáš ZatoTomáš Zato
1,31373157
asked Jan 16 at 17:56
Tomáš ZatoTomáš Zato
1,31373157
asked Jan 16 at 17:56
Tomáš ZatoTomáš Zato
1,31373157
1,31373157
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
In the address bar, type about:config. Heed the warning about dragons. In the search box enter security.pki.distrust_ca_policy. Change the value to 0 to allow these certificates.
Remember though that there's a valid reason that browsers block these certificates, so only do this if you understand the risk.
Note that Mozilla have stated that this option will be removed in version 65 of Firefox.
answered Jan 16 at 19:07
garethTheRedgarethTheRed
2,020912
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1395057%2fmozilla-pkix-error-additional-policy-constraint-failed-workaround-for-intranet%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
In the address bar, type about:config. Heed the warning about dragons. In the search box enter security.pki.distrust_ca_policy. Change the value to 0 to allow these certificates.
Remember though that there's a valid reason that browsers block these certificates, so only do this if you understand the risk.
Note that Mozilla have stated that this option will be removed in version 65 of Firefox.
answered Jan 16 at 19:07
garethTheRedgarethTheRed
2,020912
add a comment |
In the address bar, type about:config. Heed the warning about dragons. In the search box enter security.pki.distrust_ca_policy. Change the value to 0 to allow these certificates.
Remember though that there's a valid reason that browsers block these certificates, so only do this if you understand the risk.
Note that Mozilla have stated that this option will be removed in version 65 of Firefox.
answered Jan 16 at 19:07
garethTheRedgarethTheRed
2,020912
add a comment |
In the address bar, type about:config. Heed the warning about dragons. In the search box enter security.pki.distrust_ca_policy. Change the value to 0 to allow these certificates.
Remember though that there's a valid reason that browsers block these certificates, so only do this if you understand the risk.
Note that Mozilla have stated that this option will be removed in version 65 of Firefox.
answered Jan 16 at 19:07
garethTheRedgarethTheRed
2,020912
In the address bar, type about:config. Heed the warning about dragons. In the search box enter security.pki.distrust_ca_policy. Change the value to 0 to allow these certificates.
Remember though that there's a valid reason that browsers block these certificates, so only do this if you understand the risk.
Note that Mozilla have stated that this option will be removed in version 65 of Firefox.
answered Jan 16 at 19:07
garethTheRedgarethTheRed
2,020912
answered Jan 16 at 19:07
garethTheRedgarethTheRed
2,020912
answered Jan 16 at 19:07
garethTheRedgarethTheRed
2,020912
answered Jan 16 at 19:07
garethTheRedgarethTheRed
2,020912
2,020912
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1395057%2fmozilla-pkix-error-additional-policy-constraint-failed-workaround-for-intranet%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
