Forum / Remote Desktop Manager - Bug Report

Allow embed Firefox to access SSL w/invalid certs

  • Create an Issue
  • Cancel

When I attempt to open an SSL-encrypted webpage with the Mozilla Firefox embedded xulrunner-based addin, if the site (like a local firewall/router) has a self-signed SSL certificate, I get a popup with an error and then nothing happens. No way to view the webpage anyway or add the certificate authority to the trusted roots or anything, just failure with no way around it. I have searched in the past (was a few months ago) for a way to add trusted certificates to xulrunner and was able to locate some partially-helpful information but nothing that led to a solution. Firefox/xulrunner keeps its own trusted cert repository so adding to the Windows store doesn't work, and if you have Firefox installed you can use the GUI to modify trusted roots but that doesn't apply to the xulrunner instance used by RemoteDesktopManager, so that also doesn't work. Any way to add this to RDM or enable a checkbox that bypasses SSL validity checks?

Clock8 yrs

Hi,
I will do some search on my side, but I'm not sure that there is a solution. If anybody have an idea, let me know please.

David Hervieux

signaturesignature

Clock8 yrs

We are running in to the same brick wall. The bad thing is that we have 8 sites that only work with firefox and IE just error's out with java errors, all sites are for management utilities.

Clock8 yrs

I'd be just as happy (or happier) with Google Chrome embedded. Using Chrome Frame or directly. Perhaps using Chromium vs. the branded Chrome browser, it looks like http://stackoverflow.com/questions/2162173/is-google-chrome-embeddable has a link to .Net bindings for Chromium: https://github.com/chillitom/CefSharp

Also, there are several links (including to the above, plus some direct Webkit-renderer embed links) at: http://stackoverflow.com/questions/142184/is-there-an-embeddable-webkit-component-for-windows-c-development that may be useful. Links there include http://sourceforge.net/projects/webkitdotnet/ for WebKit.Net and Awesomium: http://www.khrona.com/products/awesomium/ (which is a paid dev control)

Clock8 yrs

The Question is, will that fix the issues we are seeing? I would also be happy to see chrome embedded as well =)

Clock8 yrs

Thank you for the link, I will definitively take a look and see what we can do.

David Hervieux

signaturesignature

Clock8 yrs

Hi guys,
I found a workaround for this problem:

https://developer.mozilla.org/En/Cert_override.txt

The steps explained:
1. Close Remote Desktop Manager
2. Open the web page in Firefox and accept the invalid certificate
3. Browse to the Firefox profile folder and copy the file "cert_override.txt" in the Geckcofx folder
4. Restart RDM and everything is fine now!!!

Firefox directory: %AppData%\Mozilla\Firefox\Profiles\{RANDOM}
GeckcofX directory: %LocalAppData%\Geckofx\1.9\DefaultProfile\Geckofx\1.9\DefaultProfile
<em>edited by dhervieux on 3/24/2011</em>

David Hervieux

signaturesignature

Clock8 yrs

Sweet, that worked! And for those of you who read english instead of developer talk =) Here are the directories on windows 7
In your firefox profile, take this file
c:\users\%USERNAME%\AppData\Roaming\Mozilla\Firefox\Profiles\{RANDOM}\cert_override.txt
and place it here
c:\users\%USERNAME%\AppData\Local\Geckofx\1.9\DefaultProfile\

Just an FYI, my co-worker just tried the 2.0 XulRunner and he's having trouble finding the profile so it's possible that it may not work on 2.0.

Clock8 yrs

Hi,
The XulRunner 2.0 does not work very well with RDM. They redesigned the XulRunner in the version 2.0 and it does not seems to be compatible with the .NET implementation.

David Hervieux

signaturesignature

Clock8 yrs

Just to add another .NET control to the list, MozNet (Se7en Soft Software) is an extended fork of the GeckoFX control. Offering many more features, although still suffers from the same SSL issue due to the default XulRunner builds being compiled without the needed support.
EDIT: As of MozNET R14 (soon to be released or possibly released by the time you read this) has support for adding SSL certificates without the messy file copy stuff mentioned above.
<em>edited by se7ensoft on 6/21/2011</em>

Clock8 yrs

Thank you, I will take a look at it for sure.

David Hervieux

signaturesignature

Clock8 yrs

David Hervieux wrote:

Thank you, I will take a look at it for sure.

Got a little question regarding this.
I'm playing with the idea of using GeckoFX XURunner in my portable RDM environment, but I almost immediately ran into issues with certificates.

I run RDM from a portable location. So my file structure is as you can see below:
./RemoteDesktopManager\Tools\GeckoFX_XULRunner
GeckoFX XULRunner

I have tried copying my own local "cert_override.txt" to RemoteDesktopManager\Tools\GeckoFX_XULRunner\defaults\profile\cert_override.txt but that does not work. I'm I supposed to copy it into some other directory inside my GeckoFX_XULRunner directory?

I'm running the version of GeckoFX XULRunner that I downloaded from inside RDM "xulrunner-1.9.1.16.en-US.win32".
RDM v8.0.22.0

Any help would be appreciated smile

P. S. Any chance we will be seeing MozNET or some other Chrome wrappers that would run, without being installed[and could handle SSL ect.]? wink

Thank you for your time.

EDIT: I just read the following here: http://se7en-soft.com/moznet/changes/default.aspx
..If you're just checking back with us, the following changes are in store for the next release : R19.8

Added enhanced certificate handling. It is now possible to import and export, amongst other tasks, certificates in the certificate store. (08/30/2012)
edited by Brandur on 2/13/2013

//Brandur

GeckoFX_XULRunner.jpg
Clock6 yrs

Hi,
You seems to have done the right thing. I will verify if there is something else.

On the other hand, MozNET is on todo list for sure.

David Hervieux

signaturesignature

Clock6 yrs

Hi David
JFYI, I just tried with RDM BETA 8.0.23.0 and it's the same!

Yes, I agree. MozNET definitely looks like the way to go(but I of course don't know what work is needed to implement/utilize it into RDM). Hopefully it won't be a huge task to undertake.

Thank you.

//Brandur

Clock6 yrs

Hi David
Just wanted to ask if you got any further with supporting MozNET XulRunner (http://se7en-soft.com/software/moznet/modern.aspx)?

//Brandur

Clock5 yrs

We now support both:
• MozNET (R19.8)
• geckofx

See here:
http://help.remotedesktopmanager.com/index.html?sessions_webbrowser_firefox.htm

Stefane Lavergne

signaturesignature

Clock5 yrs

FYI - We don't yet have support for MozNET R22

Stefane Lavergne

signaturesignature

Clock5 yrs

That is great.
I'm going to try if it solves the issues we are having.
Thank you.

//Brandur

Clock5 yrs