Skip to main content
20 votes

Setting Access-Control-Allow-Origin on Cloudfront

Update: None of this is needed anymore as cloudfront now has proper support for this. Refer to: https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-cloudfront-supports-cors-security-custom-http-...
Rasmus Larsen's user avatar
7 votes

Cannot add a self signed certificate in Firefox

In order to be added to the certificate authority list in Firefox a certificate must have X509v3 extension CA:TRUE, e.g. X509v3 extensions: X509v3 Key Usage: critical ...
Esa Jokinen's user avatar
  • 50.2k
4 votes
Accepted

Altering hostname-IP mapping within a browser

In Chromium, you can use the --host-resolver-rules option to specify a list of mappings. For example: $ chromium \ --user-data-dir=/tmp/some-temp-dir \ --host-resolver-rules='MAP host1.example....
mmoya's user avatar
  • 306
4 votes

Setting Access-Control-Allow-Origin on Cloudfront

I came across this problem today, where some font files (*.woff/*woff2) on S3 being served via CloudFront had lost their Access-Control-Allow-Origin response header, resulting in CORS errors from web ...
Stuart Welch's user avatar
4 votes
Accepted

Why does Firefox show SSL_ERROR_BAD_CERT_DOMAIN with a self-signed wildcard certificate, but other browsers do not?

Your certificate has the following "Subject Alternative Names" (SAN): DNS:*.mainserver.local DNS:*.mainserver DNS:*.mgmt.ctb.co.at IP:192.168.0.254 IP:192.168.0.9 IP:192.168.10.254 IP:192....
pmhahn's user avatar
  • 126
4 votes
Accepted

Disable SHA1 now Firefox won't work

There does not appear to be any overlap between the cipher suites enabled on the server side (IIS Crypto screenshot) and the ones proposed by the client (Netmon screenshot). I'm guessing you are ...
Håkan Lindqvist's user avatar
4 votes
Accepted

Maximum SSL certificate duration

As of September 1, 2020, 12 months. This was a change agreed upon by the major certificate authorities and aligns with the wishes of the browser manufacturers (Apple, Mozilla, Chrome, etc.) You can ...
Brandon Xavier's user avatar
3 votes
Accepted

DDOS-style requests from initially legitimate users of Firefox revision 52 (latest) -- extension causing it?

I suspect you are seeing symptomps of this Firefox bug: Cached iframe executes previously loaded and dynamically inserted scripts, makes network calls before "onload" event. This affects websites in ...
hayalci's user avatar
  • 3,691
3 votes
Accepted

Why are some people getting a connection-not-secure page when accessing my server, even though most people are getting a secure connection?

Your server seems to be only sending the end-entity (server) certificate. Running: openssl s_client -connect media.edweb.net:443 returns just the server certificate. However, that certificate was ...
garethTheRed's user avatar
  • 4,874
3 votes

how to block mailto in firefox running on windows 10

Try following inside of Firefox: via address bar, use: about:config search for: network.protocol-handler.external.mailto change value to: false
alexus's user avatar
  • 13.5k
3 votes
Accepted

Mozilla Firefox - SEC_ERROR_UNKNOWN_ISSUER - Let's encrypt certificate via Certbot - CentOS 7

You should serve the intermediate cert(s) in the certificate chain. This is what the test you linked says: "The certificate is not trusted in all web browsers. You may need to install an Intermediate/...
Håkan Lindqvist's user avatar
3 votes
Accepted

nginx 1.15.10 - TLSv1.3 doesn't get applied despite the config

built with OpenSSL 1.1.0j 20 Nov 2018 (running with OpenSSL 1.1.1b 26 Feb 2019) nginx was build against OpenSSL 1.1.0. TLS 1.3 is only implemented with OpenSSL 1.1.1. It is not sufficient to just ...
Steffen Ullrich's user avatar
3 votes
Accepted

Could not start a new session. Response code 500. Message: Failed to read marionette port

I think there is bug in firefox binary installed using apt/snap, I faced same issue when I installed firefox from apt package respository. I solved this by downloading firefox from official mozilla ...
Vaibhav Panmand's user avatar
2 votes

Setting Access-Control-Allow-Origin on Cloudfront

For a simple use case, I built a CloudFront + S3 origin solution to provide HTTPS and CORS settings for a static website. Using the new CloudFront managed response header policies simplifies the CORS ...
AlexW's user avatar
  • 121
2 votes

Altering hostname-IP mapping within a browser

I found a solution here that works for one IP on a per-Firefox-profile basis. Navigate to about:config. Set network.dns.forceResolve to e.g. 127.0.0.1
Stefan_EOX's user avatar
2 votes

Lock down Mozilla Firefox for Citrix

There is setting: "browser.shell.checkDefaultBrowser" = false In browser folder under Firefox installation create file (UTF8 without BOM) with content: [XRE] EnableProfileMigrator=false There is ...
Slipeer's user avatar
  • 3,313
2 votes

How to reorder / sort profiles in Firefox

Ok, after testing many addons, I found a way to reorder my profiles. It is not in an addon (should be main feature in Firefox, but anyway...). The trick is to edit your profiles.ini file. It is ...
Joel.O's user avatar
  • 509
2 votes

ERR_SSL_VERSION_OR_CIPHER_MISMATCH with Chrome and Firefox

Test your site on https://www.ssllabs.com/ssltest/. See what the handshake tests say Use IISCrypto to tune your server removing the older weak protocols (SSL 2, SSL 3, TLS 1.0), make sure that ...
Mass Nerder's user avatar
  • 1,027
2 votes
Accepted

Apache logs you off as soon as you load a PDF

pdf.js in Firefox will use a seperate request using a Range header, effectively overwriting your cookie. This behaviour is tracked in Issue #8958 at the mozilla repository. Other than switching auth ...
anx's user avatar
  • 9,842
2 votes
Accepted

Can't Get Any Browser to Prompt for A Client Certificate (Certificates on Apache)

I figured it out. In my Apache settings, I changed: SSLCACertificatePath to ~~~~~~/ca/certs/ca.cert.pem SSLVerifyDepth 1 to SSLVerifyDepth 10 And the most important thing I changed was I converted ...
alexs973's user avatar
2 votes
Accepted

How to install a Mozilla Firefox addon for all users on RDP server?

Installed the addon using this manual: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Alternative_distribution_options/Add-ons_in_the_enterprise
real_sm's user avatar
  • 112
2 votes

How to install a Mozilla Firefox addon for all users on RDP server?

Instead of launching the .xpi installer, copy the .xpi file into a standard extension folder Global (x64) C:\Program Files\Mozilla Firefox\browser\extensions\{appID}.xpi Global (x86) C:\Program Files ...
Esa Jokinen's user avatar
  • 50.2k
2 votes

How to prevent Firefox extensions/add-ons from being disabled/uninstalled

This is precisely the kind of task that Policies for Firefox for Enterprise were created for. You may lock extensions based on their ID. If you are not sure where to find the extension ID, look inside ...
anx's user avatar
  • 9,842
2 votes
Accepted

Why is firefox connecting to these servers on startup?

According to MozillaZine's article Connections established on startup: Update checks (application, phishing sites database, add-ons blocklist, metadata for installed add-ons). Loading Live Bookmarks, ...
Esa Jokinen's user avatar
  • 50.2k
2 votes
Accepted

What happens to a user's browser cache when the website's IP address changes?

The cache looks for URL hits. http://example.com/foo.js is still http://example.com/foo.js if the IP of example.com changes. Many sites do load balancing with DNS, where a single name may have many A ...
vidarlo's user avatar
  • 9,739
2 votes

Seeking Technical Solution to Restrict File Paths Exceeding 255 Characters on Windows Servers

There is a Generell Aproach: The Registry way Please be aware that this could be harmful. As it violates the Standards for Windows limitations. using Regedit to edit HKEY_LOCAL_MACHINE\SYSTEM\...
djdomi's user avatar
  • 2,092
1 vote

Firefox Certificate Authorities: Where is 'Google Internet Authority G2'?

Whatever you do, don't import a certificate to your trust store just because you've found it being served by someone. It's definitely safer to revert to the default trust store, see if it fixes the ...
kubanczyk's user avatar
  • 14k
1 vote
Accepted

how to validate dhparams in apache <=2.4.6

You can check the exact prime in use by using wireshark and listening on the connection. Filter the connection with ssl && ip.addr = <host ip> connect to the server with openssl ...
FalcoGer's user avatar
  • 136

Only top scored, non community-wiki answers of a minimum length are eligible