Saturday, January 3, 2009

Remember Certificate Exception extension for Firefox3

I submit a new add-on for Firefox3: Remember Certificate Exception.
https://addons.mozilla.org/en-US/firefox/addon/10246



RCE.xpi features:
Auto complete Firefox3 SSL certificate exception override on exceptionDialog.
Firefox3 introduced new 'Add Exception/BadCert Override' mandatory operations to bypass bad certificate exception.
It is much safer but inconvenient to do mass bypassing while doing development with self-signed certificates.
User wants a tool to auto complete add exception/badcert override operations.
RCE extension is a such kind robot which can:
- auto-click 'Or you can add an exception' link
- auto-click 'Add Exception' button
- auto-click 'Get Certificate' button
- auto-click 'Confirm Security Exception' button
- auto-reload ssl page
The idea of RCE.xpi came from solving my Selenium web automation testing ssl page blocking issue.
Please try badcert demo URLs inside http://kuix.de/mozilla/certwarndiscussion/proposal20061016/ with RCE extension.
Please read firefox3 security topic: http://www.smop.co.uk/blog/index.php/2008/03/25/firefox-3-security-madness/
WARNING: please disable RCE when you are going to browse untrusted websites to avoid phishing and mal-ware.

Screenshot:
Posted by Jerry Qian at 10:33:00 PM
Labels:

27 comments:

  1. labmanagerFebruary 6, 2009 at 1:44 PM

    A very useful add on to get around a horrible procedure added to firefox3. I would love to see it grow. It would be perfect for our campus if it could be settup to run the proceedure only on certain domains or lists of web sites.

    ReplyDelete
  2. chetasMarch 21, 2009 at 10:52 PM

    I tried to use this addon on FF3, as part of my selenium automation suite but still get the error.Here is the error description ---
    site:443 uses an invalid secuirty certificate.The certificate is not trusted because it is self signed
    The certificate is only valid for a id="cert_domain_link"
    title="localhost.localadmin"local
    (error code : sec_error_untrusted_issuer).
    When I manually click through this error, I get this firefox 3 secuirty exceptions which is not clicked through by RCE.
    Any help with this problem is very much appreciated.--- Chinmayi

    ReplyDelete
  3. TiMiApril 15, 2009 at 9:46 AM

    Hi bro,

    Can you show me another add-ons like this for firefox2? I'm using firefox2 for my automation test. Thanks

    ReplyDelete
  4. KonradMay 7, 2009 at 5:02 AM

    First of all - great work! Very useful extension.

    I added this extension to my selenium RC testing and everything is working fine until the very last stage where after adding the exception, page needs to reload. I can see the standard dialogue box saying:

    "To display this page, the application must send information that will repeat any action (such as a search or order confirmation) that was performed earlier." Resent / Cancel

    Any ideas how to solve this problem?

    ReplyDelete
  5. UnknownMay 12, 2009 at 8:31 AM

    I'll echo the first comment: great tool. It would be vastly improved (in my opinion) if it supported some method for specifying trusted sites or domains.

    ReplyDelete
  6. AnonymousMay 28, 2009 at 11:15 PM

    I have download RCE and installed the plugin, but dont see in the tools menu, how to use this tool?

    please respond rbasappa@gmail.com

    ReplyDelete
  7. Balakrishnan RamaswamyJuly 9, 2009 at 12:02 PM

    I'm using this plug-in for quite some time with FireFox 3 and found very useful.

    When tried to install for FireFox 3.5, it says this plugin is for older version of FireFox.

    Any plans for supporting both versions? (FF 3.0 & 3.5)

    Thanks,
    Bala

    ReplyDelete
  8. UnknownJuly 22, 2009 at 2:27 AM

    Yes, we're having similar problems with Firefox 3.5. Any chance this addon will be updated?

    ReplyDelete
  9. UnknownJuly 29, 2009 at 6:56 AM

    Please update for FF 3.5! It's a great extension!

    ReplyDelete
  10. Ken HuangJuly 30, 2009 at 4:08 PM

    same problem with the "resent/cancel" confirm popup, when try to login to SSL protected website.

    ReplyDelete
  11. AnonymousAugust 3, 2009 at 4:00 PM

    any chance this getting FF 3.5 support? I think I'd cry in appreciation if so! :D

    Thanks for the great extension!

    ReplyDelete
  12. SerikAugust 12, 2009 at 8:44 PM

    Please, update this tool to use it in Firefox 3.5

    ReplyDelete
  13. UnknownAugust 25, 2009 at 7:57 AM

    Jerry, thanks for the super awesome add on, anytime line on when this will be supported for FF 3.5?

    ReplyDelete
  14. HaroldSeptember 1, 2009 at 7:48 PM

    Adding my vote for 3.5 support...

    ReplyDelete
  15. AlexSeptember 6, 2009 at 10:09 PM

    I'm throwing in my plea to update for 3.5 as well. I use this addon at work every day, or used to, until some asshat updated FF to 3.5 on my machine, which broke the extension. I'd update it myself if I could figure out how.

    Thanks for all your hard work on this addon, Jerry. We really do appreciate it, hence why we are begging for an update :)

    ReplyDelete
  16. UnknownSeptember 7, 2009 at 5:46 AM

    Up for 3.5 support!

    ReplyDelete
  17. AnthonySeptember 14, 2009 at 12:09 PM

    Support for 3.5 ? :-) Please Please Please! :-)

    ReplyDelete
  18. UnknownSeptember 16, 2009 at 8:26 AM

    Hello all,

    I just installed RCE on Firefox 3.5 using this recipe:

    1: Use Internet Explorer to download

    http://releases.mozilla.org/pub/mozilla.org/addons/10246/remember_certificate_exception-0.8.0-fx.xpi

    and save it to disk.

    2: use a ZIP utility (I use free 7-zip) to open the .xpi file

    3: right-click install.rdf and choose Edit (F4)

    4: Find and replace em:maxversion text 3.1b2 with e.g. 3.9

    5: Close notepad and save - 7-zip will prompt you to update the .xpi archive - choose OK and close 7-zip

    6: Pull the .xpi file to an open Firefox 3.5 window, accept installation and restart Firefox 3.5.

    ReplyDelete
  19. UnknownSeptember 17, 2009 at 1:30 AM

    I already installed the extension with the same trick suggested by Rasmus but replacing^the versión with 3.6.
    The extension installed but it wasn't working.
    Is it working for you Rasmus or just got installed?
    I'm giving it a try with 3.9...

    ReplyDelete
  20. AnonymousSeptember 30, 2009 at 7:08 AM

    Please update the extension for FF 3.5. Mozilla have chosen to introduce a new way of presenting the bad certs screen. The robot was extremely useful in my daily work, but they broken it.

    ReplyDelete
  21. UnknownNovember 4, 2009 at 2:46 AM

    on the mozilla extensions page, now RCE supports FF 3.5

    ReplyDelete
  22. AnonymousNovember 17, 2009 at 11:14 AM

    Please add support for Linux.

    ReplyDelete
  23. Anton ShishkovNovember 25, 2009 at 3:57 PM

    would really want this plugin to work on linux and mac

    ReplyDelete
  24. UnknownDecember 7, 2009 at 2:01 PM

    Hi Jerry,
    Do you plan to make a mac osx version? Really would be great if you do...

    ReplyDelete
  25. UnknownJanuary 4, 2010 at 9:31 AM

    Hi Jerry,
    Please make one for Mac OSX, it's really a great plugin

    ReplyDelete
  26. UnknownJanuary 24, 2010 at 3:54 AM

    Hi,

    Any updates on compatibility with Firefox version 3.6?

    ReplyDelete
  27. UnknownFebruary 22, 2011 at 10:30 AM

    Hi Jerry,

    Could you tell me where in the Firefox Profile for your extension is the "Enable RCE" (on/off) setting recorded?

    (Without going into details, the reason I want to know is because I want to set this programmatically, using a script, in the profile.)

    Thanks.

    ReplyDelete

Subscribe to: Post Comments (Atom)