We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Zoeken in Support

Vermijd ondersteuningsscams. We zullen u nooit vragen een telefoonnummer te bellen, er een sms naar te sturen of persoonlijke gegevens te delen. Meld verdachte activiteit met de optie ‘Misbruik melden’.

Meer info

Deze conversatie is gearchiveerd. Stel een nieuwe vraag als u hulp nodig hebt.

Can't Access my Web Server with HTTP

  • 4 antwoorden
  • 1 heeft dit probleem
  • 6 weergaven
  • Laatste antwoord van Dean Weimer

Dean Weimer
Dean Weimer
more options

I have my own web server, and suddenly I can only access the site with HTTPS from Firefox on my home PC. I have tried adjusting the autofill settings clearing cache, even added a link on the page to click and load it as HTTP instead. Nothing works it always comes up with HTTPS. The page does load with Firefox on other machines as HTTP. So I suspect that at some point an error page loaded with a secure transport header in it (perhaps while doing maintenance on my firewall with uses NAT reflection to direct local machines to the web server) and Firefox has cached that in some method that it is not letting me clear it. I appreciate that there is some effort going into making the web more secure. But the site contains nothing that requires security and being the sites maintainer I need to be able to test it with both HTTP and HTTPS.

I have my own web server, and suddenly I can only access the site with HTTPS from Firefox on my home PC. I have tried adjusting the autofill settings clearing cache, even added a link on the page to click and load it as HTTP instead. Nothing works it always comes up with HTTPS. The page does load with Firefox on other machines as HTTP. So I suspect that at some point an error page loaded with a secure transport header in it (perhaps while doing maintenance on my firewall with uses NAT reflection to direct local machines to the web server) and Firefox has cached that in some method that it is not letting me clear it. I appreciate that there is some effort going into making the web more secure. But the site contains nothing that requires security and being the sites maintainer I need to be able to test it with both HTTP and HTTPS.

Gekozen oplossing

you could also try to edit the "SiteSecurityServiceState.txt" file in your profile while firefox is closed - it holds the sites which sent the hsts flag in the past...

Profiles - Where Firefox stores your bookmarks, passwords and other user data

Dit antwoord in context lezen 👍 0

Alle antwoorden (4)

philipp
philipp
  • Moderator
more options

hi, you can use the https://addons.mozilla.org/firefox/addon/force-tls/ addon in order to edit/clear sites which are stored with a HSTS flag.

Dean Weimer
Dean Weimer Vraageigenaar
more options

This Add-On Appears to be broken in recent versions of Firefox.

XML Parsing Error: undefined entity Location: chrome://forcetls/content/forcedsites.xul Line Number 125, Column 7: <button oncommand="close();" icon="close" <="" p="">

^</button>

philipp
philipp
  • Moderator
more options

Gekozen oplossing

you could also try to edit the "SiteSecurityServiceState.txt" file in your profile while firefox is closed - it holds the sites which sent the hsts flag in the past...

Profiles - Where Firefox stores your bookmarks, passwords and other user data

Dean Weimer
Dean Weimer Vraageigenaar
more options

This fixed it, thanks for the help.