Unable to bypass security exception for 2 days expired cert Topic is solved

[Karina800]

Hi,
Never seen this before.
Palemoon 27.3.0. 64 Bit won't let me add a security exception for site
https://www.edv-lehrgang.de/fussnoten-endnoten/
with two days expired certificate (see screenshot attached)
Any ideas why and what to do? Can anyone reproduce this?
Thanks and Cheers
k.

Palemoon 27.3.0. 64 Bit, JavaScript active
Windows 7
Site: https://www.edv-lehrgang.de/fussnoten-endnoten/
Add-Ons reproduced it with UBlock and Encrypted web disabled, but installed.
Else no privacy relevant or functionality reducing Add-Ons, but a few addons active, that I use for years (norwell, quickjava, refcontrol)

image800.PNG

[coffeebreak]

The site uses HTTP Strict Transport Security (HSTS). (See Qualys)

If you change the setting network.stricttransportsecurity.enabled to false, it will offer the opportunity to set an exception.

[Pallid Planetoid]

The site uses HTTP Strict Transport Security (HSTS). (See Qualys)

If you change the setting network.stricttransportsecurity.enabled to false, it will offer the opportunity to set an exception.

I tried setting this pref to "false" and I still get the same thing the OP is getting, no opportunity to do anything except "get me out of here".

Maybe this pref needs me to close/open the browser.... I'll try that....

[Pallid Planetoid]

Okay, browser needs to be closed/opened (after changing pref setting) for pref to take effect (as illustrated below in the screen-shot0.

Change in warning after exit - start browser.png

Just in case the OP (who is new to the forum) is not familiar with pref settings, type "about:config" in the browser address bar (without quotes) click "I promise to be careful" button.
Do the following (click on images below to see better):
If you type the pref setting in the search box, you'll get this which has a value of "true" (which is the default setting):

network.stricttransportsecurity.enabled - default true.png

By doing a left-double-click on this setting the value will change (toggle) to "false" as illustrated in the screen-shot below (you can close about:config tab once change has been made):

network.stricttransportsecurity.enabled - set to false.png

As mentioned above, be sure to close/open Pale Moon to see the prompt you see in the first screen-shot.

Thanks coffeebreak (I don't recall that we used to have this option )

[Moonchild]

What really needs to happen is the people need to renew their certificate.
Enforcing strict https with HSTS implies that you MUST, at all times, have your server security in order.