Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Este fío arquivouse. Faga unha nova pregunta se precisa axuda.

Firefox doesn't work on a network with HTTPS Inspection enabled

macbloke
macbloke
more options

We can use all other browsers on our network with HTTPS inspection enabled without an issue. This applies to both Windows and Mac clients.

We have our proxy's HTTPS Inspection certificate installed on all devices on the network.

Firefox is patched to the latest version.

There don't appear to be any preferences which control or enable the bypass of Firefox's SSL certificate checking.

What needs to be changed within Firefox to enable HTTPS inspection to work with it.

TIA

MB

We can use all other browsers on our network with HTTPS inspection enabled without an issue. This applies to both Windows and Mac clients. We have our proxy's HTTPS Inspection certificate installed on all devices on the network. Firefox is patched to the latest version. There don't appear to be any preferences which control or enable the bypass of Firefox's SSL certificate checking. What needs to be changed within Firefox to enable HTTPS inspection to work with it. TIA MB

All Replies (1)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

Firefox has its own certificate store, separate from the Mac system keychain and the Windows certificate store. You will need to insert the proxy's signing certificate into Firefox's cert8.db file.

While I could describe end user steps to import the cert manually, I suppose you need a centralized deployment solution. For that, I could only suggest a few links:

http://mike.kaply.com/2015/02/10/installing-certificates-into-firefox/

https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil#Adding_a_Certificate_to_the_Database

Threads with manual import steps for Windows (on Mac, read Tools > Options as Firefox > Preferences):

https://support.mozilla.org/questions/1086078#answer-787652