Showing posts with label Remember Certificate Exception. Show all posts
Showing posts with label Remember Certificate Exception. Show all posts

Saturday, January 3, 2009

Remember Certificate Exception extension for Firefox3

I submit a new add-on for Firefox3: Remember Certificate Exception.
https://addons.mozilla.org/en-US/firefox/addon/10246



RCE.xpi features:
Auto complete Firefox3 SSL certificate exception override on exceptionDialog.
Firefox3 introduced new 'Add Exception/BadCert Override' mandatory operations to bypass bad certificate exception.
It is much safer but inconvenient to do mass bypassing while doing development with self-signed certificates.
User wants a tool to auto complete add exception/badcert override operations.
RCE extension is a such kind robot which can:
- auto-click 'Or you can add an exception' link
- auto-click 'Add Exception' button
- auto-click 'Get Certificate' button
- auto-click 'Confirm Security Exception' button
- auto-reload ssl page
The idea of RCE.xpi came from solving my Selenium web automation testing ssl page blocking issue.
Please try badcert demo URLs inside http://kuix.de/mozilla/certwarndiscussion/proposal20061016/ with RCE extension.
Please read firefox3 security topic: http://www.smop.co.uk/blog/index.php/2008/03/25/firefox-3-security-madness/
WARNING: please disable RCE when you are going to browse untrusted websites to avoid phishing and mal-ware.

Screenshot:

Friday, January 2, 2009

Selenium1.0beta for Firefox3 is ready

We have fixed most of blocking bugs on Firefox3. It's time to upgrade our Selenium lab machines to Firefox3.0.5. Mozilla has announced Firefox2.0.0.20 would be the last version and stopped Firefox2 maintenance & supports. The Firefox3 market share is increasing to 17% at the end of 2008.


The interesting new issue on Firefox3 is SSL cert exception page blocking Selenium automation. On Firefox2, we invoke RMD.xpi XPCOM in Selenium to intercept all bad cert exception for our self-signed certificates. However, it doesn't work on Firefox3 now that RMD.xpi's author said it only supported Firefox2. Firefox3 introduced a new SSL certificate exception rule. We must find a new workaround.

Block step:


Try below selenium ssl test case:
 
<tr>
 <td>open</td>
 <td>http://kuix.de/mozilla/certwarndiscussion/proposal20061016/</td>
 <td></td>
</tr>
<tr>
 <td>open</td>
 <td>https://www.cacert.org</td>
 <td></td>
</tr>
<tr>
 <td>open</td>
 <td>https://www.kuix.de</td>
 <td></td>
</tr>
<tr>
 <td>open</td>
 <td>https://mur.at</td>
 <td></td>
</tr>
<tr>
 <td>open</td>
 <td>https://kuix.de:9443</td>
 <td></td>
</tr>
<tr>
 <td>open</td>
 <td>https://www.kuix.de:9443</td>
 <td></td>
</tr>
I plan to create a new project 'Remember Certificate Exception'(RCE) on AMO today. The RCE.xpi's purpose is auto-complete Firefox3 certificate exception override.