[Request] Allow access to web resource with expired certificate  [Closed]

Suggestions and feature requests for the Pale Moon browser
Locked
User avatar
unnecuser
New to the forum
New to the forum
Posts: 2
Joined: 2020-11-07, 20:34

[Request] Allow access to web resource with expired certificate

Post by unnecuser » 2020-11-07, 20:47

Access to web page (https://old.computerra.ru/sgolub/707816/) is blocked & warning page with SEC_ERROR_EXPIRED_CERTIFICATE is displayed without possibility to ignore this warning & load requested documunt.

User avatar
Massacre
Hobby Astronomer
Hobby Astronomer
Posts: 17
Joined: 2020-05-01, 13:16

Re: [Request] Allow access to web resource with expired certificate

Post by Massacre » 2020-11-08, 00:59

Well, it is actually possible to add exception (select I Understand the Risks). But I have disabled HSTS.

vannilla
Board Warrior
Board Warrior
Posts: 1274
Joined: 2018-05-05, 13:29

Re: [Request] Allow access to web resource with expired certificate

Post by vannilla » 2020-11-08, 01:16

There are many reasons to block access to sites with expired certificates, so rather than asking the web browser to go againts best practices, you should ask the site owners to renew the certificate.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 28495
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: [Request] Allow access to web resource with expired certificate

Post by Moonchild » 2020-11-08, 06:29

Massacre wrote:
2020-11-08, 00:59
But I have disabled HSTS.
That actually doesn't matter for this.
vannilla wrote:
2020-11-08, 01:16
you should ask the site owners to renew the certificate.
Absolutely! I'm not sure how responsive they will be though since the certificate expired last April. :eh:
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

Kendo
Hobby Astronomer
Hobby Astronomer
Posts: 23
Joined: 2020-03-17, 02:27

Re: [Request] Allow access to web resource with expired certificate

Post by Kendo » 2020-11-08, 07:59

If it wasn't for these warnings, I might have missed the fact that my own SSL certificate was missing a link to its CA authority.

And further to that, because i made some cert validation tests, I also found that although I had disabled SSLv3 it was sill active.

Yet all other browsers approved the SSL cert.

User avatar
karlkracher
Fanatic
Fanatic
Posts: 109
Joined: 2015-12-05, 17:40
Location: palestine

Re: [Request] Allow access to web resource with expired certificate

Post by karlkracher » 2020-11-08, 08:55

While using the possibility to add an exception the checkmark for saving it permanently shouldn't be set as default.

User avatar
gepus
Astronaut
Astronaut
Posts: 546
Joined: 2017-12-14, 12:59

Re: [Request] Allow access to web resource with expired certificate

Post by gepus » 2020-11-08, 11:11

In private mode browsing the exception won't be saved anyway.

User avatar
unnecuser
New to the forum
New to the forum
Posts: 2
Joined: 2020-11-07, 20:34

Re: [Request] Allow access to web resource with expired certificate

Post by unnecuser » 2020-11-09, 12:40

There is no button to add exception (see attached image).
Attachments
Palemoon Screenshot at 2020-11-09 14-35-57_.png

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 28495
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: [Request] Allow access to web resource with expired certificate  [Closed]

Post by Moonchild » 2020-11-09, 13:10

Sorry but it doesn't look like you're using Pale Moon. New Moon is not official (and actually the most common builds are totally unaffiliated hackjobs). As such this request will be closed and further support requests need to be directed to the ones you got the browser from.
The advanced option to display the exception depends on several security factors, which may be influenced by your browser's settings or build configuration which are unknown if on an unofficial distribution.
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

Locked