Hot answers tagged

17 votes

Setting Access-Control-Allow-Origin on Cloudfront

Update: None of this is needed anymore as cloudfront now has proper support for this. Refer to: https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-cloudfront-supports-cors-security-custom-http-...
12 votes

The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer) Firefox

'USERTrust RSA Certification Authority' is not recognized as a root CA on all platforms. So, the best option is use it as an intermediate CA, having a certificate signed by 'AddTrust External CA Root'....
  • 121
7 votes

Cannot add a self signed certificate in Firefox

In order to be added to the certificate authority list in Firefox a certificate must have X509v3 extension CA:TRUE, e.g. X509v3 extensions: X509v3 Key Usage: critical ...
  • 43.7k
4 votes
Accepted

SELinux: cannot confine Firefox process to mozilla_t domain

You nearly had it. The problem is that the allow rule allow unconfined_t mozilla_t : process transition ; allows the transition to take place, but doesn't cause it to happen. For that you need ...
  • 86
4 votes

Setting default nice value for a program on linux

You have to work around a bit. First get the full path of the firefox binary: which firefox /usr/bin/firefox Now, move that to, for example, firefox-original: mv /usr/bin/firefox /usr/bin/firefox-...
  • 1,455
4 votes
Accepted

nginx redirect that forces update of URL in the browser

You aren't seeing the redirect (and krisFR is) because you have IPv6 (and he does not), and your nginx server block containing the redirect is only being used for IPv4 connections. When a server ...
4 votes

Setting Access-Control-Allow-Origin on Cloudfront

I came across this problem today, where some font files (*.woff/*woff2) on S3 being served via CloudFront had lost their Access-Control-Allow-Origin response header, resulting in CORS errors from web ...
4 votes
Accepted

Disable SHA1 now Firefox won't work

There does not appear to be any overlap between the cipher suites enabled on the server side (IIS Crypto screenshot) and the ones proposed by the client (Netmon screenshot). I'm guessing you are ...
4 votes
Accepted

Maximum SSL certificate duration

As of September 1, 2020, 12 months. This was a change agreed upon by the major certificate authorities and aligns with the wishes of the browser manufacturers (Apple, Mozilla, Chrome, etc.) You can ...
3 votes
Accepted

what is the plug-in for Firefox in order to access the HP blade center

You can download the latest version of the Java Runtime Environment (JRE) from java.com.
  • 9,440
3 votes
Accepted

max-age=0 sent by browsers despite headers modified everywhere

When you hit F5 in a browser, you are instructing the browser to ask the sever and any proxies in the path for new content. That Cache-Control request header does just that. It does not get added ...
  • 3,742
3 votes
Accepted

Setting default nice value for a program on linux

Instead of messing up your /usr/bin and getting hosed every update, why not use a ~/.local/bin ? ## one-time setup mkdir -p ~/.local/bin # prepend new path to PATH to give it priority echo 'PATH=$...
  • 154
3 votes
Accepted

DDOS-style requests from initially legitimate users of Firefox revision 52 (latest) -- extension causing it?

I suspect you are seeing symptomps of this Firefox bug: Cached iframe executes previously loaded and dynamically inserted scripts, makes network calls before "onload" event. This affects websites in ...
  • 3,611
3 votes
Accepted

Why are some people getting a connection-not-secure page when accessing my server, even though most people are getting a secure connection?

Your server seems to be only sending the end-entity (server) certificate. Running: openssl s_client -connect media.edweb.net:443 returns just the server certificate. However, that certificate was ...
  • 4,119
3 votes
Accepted

Why does Firefox show SSL_ERROR_BAD_CERT_DOMAIN with a self-signed wildcard certificate, but other browsers do not?

Your certificate has the following "Subject Alternative Names" (SAN): DNS:*.mainserver.local DNS:*.mainserver DNS:*.mgmt.ctb.co.at IP:192.168.0.254 IP:192.168.0.9 IP:192.168.10.254 IP:192....
  • 96
3 votes
Accepted

Mozilla Firefox - SEC_ERROR_UNKNOWN_ISSUER - Let's encrypt certificate via Certbot - CentOS 7

You should serve the intermediate cert(s) in the certificate chain. This is what the test you linked says: "The certificate is not trusted in all web browsers. You may need to install an Intermediate/...
3 votes
Accepted

nginx 1.15.10 - TLSv1.3 doesn't get applied despite the config

built with OpenSSL 1.1.0j 20 Nov 2018 (running with OpenSSL 1.1.1b 26 Feb 2019) nginx was build against OpenSSL 1.1.0. TLS 1.3 is only implemented with OpenSSL 1.1.1. It is not sufficient to just ...
2 votes

Is Arbitrary code execution vulnerability in Firefox a myth?

No, it's not a myth. Exploit DB is the best place to find proof-of-concept attacks for publicly disclosed vulnerabilities. Obviously not every vulnerability gets published there, but plenty do - the ...
2 votes
Accepted

Firefox sec_error_unknown_issuer after renewing root CA certificate

I figured it out! The problem was my openssl.cnf. The old certificate was created with string_mask = utf8only. This line was missing from my current file, resulting in a default value of ...
2 votes

How to make Firefox trust system CA certificates?

Have you considered deploying those certificates to Firefox as well as to the Windows cert store? https://wiki.mozilla.org/CA:AddRootToFirefox details a few options: Modify the certificate database ...
  • 6,828
2 votes

cannot identify YouTube traffic with ndpi-netfilter, when using Google Chrome

Does ndpi-netfilter handle QUIC protocol used by Chrome to load youtube videos ? You can try to block UDP/443 in iptables output chain to force Chrome to use TCP/443 and see if it solve your issue.
2 votes

Firefox instance on Remote Desktop Server (2012) takes up to 30gb RAM / user

I put together a temporary "handling" for the problem that is not a handling at all. I am still absolutely looking for the actual source of the problem. Temporary Handling I built a Powershell ...
  • 357
2 votes
Accepted

Altering hostname-IP mapping within a browser

In Chromium, you can use the --host-resolver-rules option to specify a list of mappings. For example: $ chromium \ --user-data-dir=/tmp/some-temp-dir \ --host-resolver-rules='MAP host1.example....
  • 284
2 votes

how to block mailto in firefox running on windows 10

Try following inside of Firefox: via address bar, use: about:config search for: network.protocol-handler.external.mailto change value to: false
  • 12.5k
2 votes

Lock down Mozilla Firefox for Citrix

There is setting: "browser.shell.checkDefaultBrowser" = false In browser folder under Firefox installation create file (UTF8 without BOM) with content: [XRE] EnableProfileMigrator=false There is ...
  • 3,265
2 votes

How to reorder / sort profiles in Firefox

Ok, after testing many addons, I found a way to reorder my profiles. It is not in an addon (should be main feature in Firefox, but anyway...). The trick is to edit your profiles.ini file. It is ...
  • 429
2 votes
Accepted

Can't Get Any Browser to Prompt for A Client Certificate (Certificates on Apache)

I figured it out. In my Apache settings, I changed: SSLCACertificatePath to ~~~~~~/ca/certs/ca.cert.pem SSLVerifyDepth 1 to SSLVerifyDepth 10 And the most important thing I changed was I converted ...
2 votes

How to install a Mozilla Firefox addon for all users on RDP server?

Instead of launching the .xpi installer, copy the .xpi file into a standard extension folder Global (x64) C:\Program Files\Mozilla Firefox\browser\extensions\{appID}.xpi Global (x86) C:\Program Files ...
  • 43.7k

Only top scored, non community-wiki answers of a minimum length are eligible