Dear Maintainer,

With latest updates I'm not able anymore to add an exception for HTTPS if
iceweasel is not knowing the issuer of an certificate.This is very disturbing
as e.g. Debian has also removed CAcert from list of certs so even I have the
fingerprint of the cert of a server, I cannot add them as "ok" without doing
some workaround via about:config.

I'm only getting
<domain> uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown.
(Error code: sec_error_unknown_issuer)

without any further option than  'Get me out of here!'

If the site in question is using HSTS, this is expected, as it's exactly
how it's supposed to work. For instance, if I go to
https://www.cacert.org/, I go get a sec_error_unknown_issuer, but I get
a "Get me out of here!" button.

On the other hand, see
https://bugzilla.mozilla.org/show_bug.cgi?id=1014387: a couple months ago,
I was getting a sec_error_unknown_issuer without a "Get me out of here!"
on https://panopticlick.eff.org/ because the server wasn't sending an
intermediate certificate and eff.org is HSTS.
(it's fixed now)

I'm pretty sure you're hitting something similar.

Mike

Err, I mean, a Add Exception button (and below too).

Dear Maintainer,

this also happens with error code sec_error_ca_cert_invalid on our development machines. There is no option to add a security exception. See <http://i.imgur.com/DlFJoUo.png> and <http://i.imgur.com/BCQRuxe.png>. Runnig iceweasel in safe mode did not help. Version 32.0~b5-1 from experimental behaves the same. There's not even a 'Get me out of here!' option. The server does not use HTTP Strict Transport Security.

It did work in version 30.0.

Chromium version 35.0.1916.153 Debian jessie/sid (274914) shows the page or allows to proceed after a warning.

Hi,

I wrote:

I just installed Firefox 33.0 Beta 9. It fixes this problem.

	Carsten