Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
kb:cert_override [2018/06/14 14:38]
dstillman
kb:cert_override [2018/07/30 20:24] (current)
dstillman
Line 3: Line 3:
 **Note:** These instructions are only for use with security software that intercepts/​scans HTTPS connections,​ a WebDAV server with a self-signed certificate,​ or an institutional network that monitors encrypted traffic using a custom root certificate authority (CA). You should never override certificate errors unless you [[kb:​ssl_certificate_error|understand the consequences]]. When in doubt please contact your network administrator or ISP. **Note:** These instructions are only for use with security software that intercepts/​scans HTTPS connections,​ a WebDAV server with a self-signed certificate,​ or an institutional network that monitors encrypted traffic using a custom root certificate authority (CA). You should never override certificate errors unless you [[kb:​ssl_certificate_error|understand the consequences]]. When in doubt please contact your network administrator or ISP.
  
-Zotero does not currently provide a graphical way to whitelist self-signed certificates or custom root certificates,​ so you will need to copy files from a working Firefox installation.+Zotero does not currently provide a graphical way to whitelist self-signed certificates or custom root certificates,​ so you will need to copy files from a working Firefox installation:
  
-If you use a WebDAV server with a self-signed certificate,​ you can open the WebDAV URL in Firefox, accept the certificate,​ and then copy the cert_override.txt file from the [[http://​support.mozilla.com/​kb/​Profiles|Firefox profile directory]] to the [[profile directory|Zotero profile directory]]. +  * If you are using a WebDAV server with a self-signed certificate,​ you can open the WebDAV URL in Firefox, accept the certificate,​ and then copy the cert_override.txt file from the [[http://​support.mozilla.com/​kb/​Profiles|Firefox profile directory]] to the [[profile directory|Zotero profile directory]]. 
- +  ​* ​If you or your organization is using a custom certificate authority, which can be the case when using security software or connecting via a proxy server, ​you or your IT department will need to configure Firefox 52 ESR for the custom CA and then copy the cert8.db file from the [[http://support.mozilla.com/kb/Profiles|Firefox ​profile directory]] to the [[profile directory|Zotero profile directory]]. (Later versions of Firefox will produce a cert9.db file that won't work in the current version of Zotero. An upcoming ​Zotero ​release will support the newer format.)
-If you or your organization is using a custom certificate authority, which can be the case when using security software or connecting via a proxy server, ​it may be necessary ​to use [[https://www.mozilla.org/en-US/​firefox/​organizations/​|Firefox ​52 ESR]] and copy the cert8.db file as well. (Later versions of Firefox will produce a cert9.db file that won't work in the current version of Zotero. An upcoming release will support the newer format.)+
  
 {{tag>kb }} {{tag>kb }}
kb/cert_override.1529001531.txt.gz · Last modified: 2018/06/14 14:38 by dstillman