Avatar for Username

Zoeken in Support

Vermijd ondersteuningsscams. We zullen u nooit vragen een telefoonnummer te bellen, er een sms naar te sturen of persoonlijke gegevens te delen. Meld verdachte activiteit met de optie ‘Misbruik melden’.

Meer info

Deze conversatie is gearchiveerd. Stel een nieuwe vraag als u hulp nodig hebt.

Use self signed certificate on TS 2008R2

  • 6 antwoorden
  • 1 heeft dit probleem
  • 6 weergaven
  • Laatste antwoord van martijnqui

martijnqui
martijnqui
more options

Hi reader,

We are using Firefox on a Terminal server Farm environment with roughly 20 servers. We are using a lot of intranet websites for which we have self signed certificate by our Domain controler.

Users get in Firefox the security prompt sec_error_unknown_issuer. As far I have red Firefox does not check for local self signed certificates. Is there a way we could configure for all users they do not see the error above for -> Specific<- (intranet) websites?

We dont want the users to add the (certificate) security exception like 20 times for EACH intranet website on 20 differend servers. Is it something I can edit in mozilla.cfg on each server or is there another solution?

Thanks in advance, Kind regards, Martijn

Hi reader, We are using Firefox on a Terminal server Farm environment with roughly 20 servers. We are using a lot of intranet websites for which we have self signed certificate by our Domain controler. Users get in Firefox the security prompt ''sec_error_unknown_issuer''. As far I have red Firefox does not check for local self signed certificates. Is there a way we could configure for all users they do not see the error above for -> Specific<- (intranet) websites? We dont want the users to add the (certificate) security exception like 20 times for EACH intranet website on 20 differend servers. Is it something I can edit in mozilla.cfg on each server or is there another solution? Thanks in advance, Kind regards, Martijn

Gekozen oplossing

I fixed the issue with manual below:

http://community.spiceworks.com/how_to/15158-firefox-trust-a-local-certificate-authority-for-all-users-and-computers

Dit antwoord in context lezen 👍 0

Alle antwoorden (6)

user293
user293
more options

The certificates are stored in the cert8.db file of the firefox profile folder. You can add the certificates you want on one computer, then copy the cert8.db file into each computer's profile folder (replacing the one that is already there).

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Is there a root certificate available that you could install?

See also:

martijnqui
martijnqui Vraageigenaar
more options

@User293 and @Cor-el Thanks for your responds. But I do not prefer to edit settings in an protected profile folder of users.

Is there another way?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options
martijnqui
martijnqui Vraageigenaar
more options

I have done tweaking for FireFox before within following files:

C:\Program Files (x86)\Mozilla Firefox\defaults\pref\local-settings.js and C:\Program Files (x86)\Mozilla Firefox\mozilla.cfg

Is there someway I could configure a workaround within the files above? For example disable certificate check for an specific FQDN or for intranet websites?

Kind regards, Martijn

martijnqui
martijnqui Vraageigenaar
more options

Gekozen oplossing

I fixed the issue with manual below:

http://community.spiceworks.com/how_to/15158-firefox-trust-a-local-certificate-authority-for-all-users-and-computers