This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

How do I get past MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT and add a certificate exception?

rogerjames99
rogerjames99
more options

Since updating to Firefox Mobile 16.0.2 I have not been able to access my OpenWrt router configuration pages. Firefox shows the "Untrusted Connection" page with MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT in the technical details. If I expand the "I understand the risks" section and select "Add permanent exception" all the appears to happen is that the "Untrusted Connection" page is redisplayed.

I created a PEM version of the certificate and jumped through all the hoops to get Firefox to dowload it from apache. Firefox said that the certificate had been succesfully installed.

However, this made no difference. On trying to access the site the same MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT error was displayed. This is driving me nuts. Acessing the site works fine on Desktop Firefox, and was working until recently on my tablet.

Since updating to Firefox Mobile 16.0.2 I have not been able to access my OpenWrt router configuration pages. Firefox shows the "Untrusted Connection" page with MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT in the technical details. If I expand the "I understand the risks" section and select "Add permanent exception" all the appears to happen is that the "Untrusted Connection" page is redisplayed. I created a PEM version of the certificate and jumped through all the hoops to get Firefox to dowload it from apache. Firefox said that the certificate had been succesfully installed. However, this made no difference. On trying to access the site the same MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT error was displayed. This is driving me nuts. Acessing the site works fine on Desktop Firefox, and was working until recently on my tablet.

All Replies (1)

rogerjames99
rogerjames99 Question owner
more options

This is the rather strange content of the default OpenWrt uhttpd certificate.

Certificate: 

   Data:
       Version: 3 (0x2)
       Serial Number:
           b7:32:0b:b8:3d:cb:ed:78
   Signature Algorithm: sha256WithRSAEncryption
       Issuer: C = ZZ, ST = Somewhere, L = Unknown, O = LEDE-STABLEabfb6c38, CN = LEDE-STABLE        Validity
           Not Before: Mar 23 10:03:40 2018 GMT
           Not After : Mar 22 10:03:40 2020 GMT
       Subject: C = ZZ, ST = Somewhere, L = Unknown, O = LEDE-STABLEabfb6c38, CN = LEDE-STABLE
       Subject Public Key Info:
           Public Key Algorithm: rsaEncryption
               Public-Key: (2048 bit)
               Modulus:
                   00:aa:74:3e:19:fc:24:28:0d:9f:d1:4c:b1:26:13:
                   ea:67:c2:39:b6:c8:d5:88:30:4b:3f:02:f9:d6:f4:
                   07:93:74:c6:aa:c7:9d:4e:39:59:87:f1:ee:05:02:
                   e3:1d:38:2a:00:4c:9f:af:53:e7:a8:8d:22:5e:ae:
                   0e:d3:72:7e:c4:98:1f:5b:75:ee:7c:71:2d:cc:16:
                   8f:27:f2:c3:a5:09:b2:28:a9:8e:6f:61:e1:e9:0c:
                   5a:8a:86:c0:50:ac:68:e5:29:f3:6b:65:a6:50:84:
                   4d:c1:54:51:b9:05:85:8a:1e:23:f5:a0:42:df:b6:
                   86:22:fb:41:db:e5:94:a5:e6:c3:c1:82:4f:a5:be:
                   10:e5:00:38:39:30:91:14:e2:ec:34:06:d0:ce:23:
                   a7:4f:f6:79:5d:8d:fa:75:2a:5b:3b:35:a7:6f:75:
                   b2:f4:07:0a:e1:9b:a5:c7:73:b3:a9:ad:82:b0:a0:
                   d5:f2:91:ad:14:1d:65:da:e2:a8:cf:3d:8e:9a:d8:
                   a8:94:99:ca:c4:a4:c9:fb:75:87:13:9c:26:73:2b:
                   cf:d8:b7:98:1b:3a:25:59:07:77:7f:a2:f3:a2:e4:
                   ad:fd:ce:73:f5:e5:9f:8e:0b:75:7d:93:69:bb:77:
                   9c:ac:9c:51:a0:b6:60:85:f7:10:15:21:55:f5:40:
                   24:87
               Exponent: 65537 (0x10001)
       X509v3 extensions:
           X509v3 Subject Key Identifier:
               8A:79:FF:3F:FF:19:6B:D6:11:FD:7E:9D:0E:8A:DA:80:69:9D:12:27
           X509v3 Authority Key Identifier:
               keyid:8A:79:FF:3F:FF:19:6B:D6:11:FD:7E:9D:0E:8A:DA:80:69:9D:12:27

           X509v3 Basic Constraints:
               CA:TRUE
   Signature Algorithm: sha256WithRSAEncryption
        74:45:57:09:ce:cc:33:ea:97:da:55:26:5a:b5:dc:50:fe:1b:
        e0:ee:5d:ac:78:eb:15:ba:3f:0a:30:21:91:1f:54:71:53:5e:
        f0:a0:2d:03:96:79:0b:28:1a:61:6e:9b:da:db:a0:fd:45:ea:
        e8:ae:4f:b3:97:f6:2e:22:79:8b:36:43:d4:78:d9:be:26:7e:
        4f:9e:c5:dd:7d:76:78:11:bb:93:a4:4d:93:67:56:02:09:3a:
        2e:c3:c7:f2:f1:94:16:e1:7c:14:08:80:57:c8:21:ef:94:9e:
        0f:92:98:51:84:26:72:b6:34:2f:cc:cc:5f:49:a1:1d:81:e7:
        9f:ca:bd:9c:1d:2c:23:3f:8d:6d:58:35:e2:93:74:3a:65:f2:
        24:56:6e:74:2c:d2:f9:5c:e6:9e:32:19:11:27:4f:31:c5:dd:
        fc:3a:49:ca:0b:b1:da:ea:87:46:4a:24:33:4f:d8:02:eb:03:
        ba:6c:1f:79:cf:14:22:1a:3b:12:c3:45:2d:c8:ab:f1:58:34:
        85:c5:95:10:20:f7:49:9a:2d:76:b2:ad:7f:e1:c3:b0:85:84:
        94:b2:64:7e:75:3f:74:0b:b5:71:11:37:61:11:65:95:c1:6a:
        f9:70:7c:74:0b:79:2d:f3:81:7a:9b:ba:c1:58:4f:3f:11:11:
        df:20:85:a5