Firefox Profile doesn't allow mechanism to allow untrusted certs programmatically

[lukeis]

Originally reported on Google Code with ID 1307

From #1306 the user was not able create a profile to accept untrusted certs programmatically.

Reported by theautomatedtester on 2011-02-16 10:03:17

[lukeis]

issue 1306 for linking

Reported by theautomatedtester on 2011-02-16 10:03:50

[lukeis]

fixed in r11456

Reported by theautomatedtester on 2011-02-16 10:05:19

• Status changed: Fixed

[lukeis]

This is looking better but I'm still blocked here...

Steps:
    python
    from selenium import webdriver
    from selenium.webdriver.firefox.firefox_profile import FirefoxProfile
    profile = FirefoxProfile("Steele")
    browser = webdriver.Firefox(profile=profile) 

The main web page previously saved to the Firefox profile is coming up now, so WebDriver
is no longer clearing everything. However, I still don't see the certificate I saved
to the profile:

    Go to website that requires certificate
    I Understand the Risks
    Add Exception
    Get Certificate
    Confirm

I should also mention that I cannot save this certificate after the fact to the WebDriver
launch of this Firefox profile.

Reported by cathy.pedersen on 2011-02-16 14:40:28

[lukeis]

This is why I havent closed issue 1306 since you are creating profile separately

try 

from selenium import webdriver

profile = webdriver.FirefoxProfile(accept_untrusted_cert=True)
driver = webdriver.Firefox(profile=profile)

That *should* solve the issue if you have installed the latest version from trunk

Reported by theautomatedtester on 2011-02-16 14:48:16

[lukeis]

Is this maybe due to file privileges being set by WebDriver under ~/.mozilla/firefox/<Profile>?

Reported by cathy.pedersen on 2011-02-16 14:50:51

[lukeis]

Sorry, I posted my comment before seeing your comment from 2 minutes ago... I will try
your suggestion and get back to you. Thank you.

Reported by cathy.pedersen on 2011-02-16 14:51:42

[lukeis]

I installed the latest trunk and tried your fix from Comment 4, but I'm still blocked,
unfortunately.


WebDriver Setup:
----------------
cd /home/<my dir>
svn checkout http://selenium.googlecode.com/svn/trunk/ selenium-read-only
cd ~/selenium-read-only
sudo python setup.py install
sudo ./go py_install

Firefox Profile Setup:
----------------------
firefox -no-remote -P
Add profile 'Template'
firefox -P Template -no-remote
Go to web site that I need to add an untrusted certificate for
Select 'I Understand the Risks'
Select 'Add Exception'
Select 'Get Certificate'
Select 'Confirm Security Exception' (make sure Permanently Store is selected)
Go into the web site ok
Close Firefox
Verify with 'firefox -P Template -no-remote'; navigate to web site and verify that
certificate has been stored
Try a couple more times -- each time certificate is stored

Sending WebDriver cmds from Comment #4:
---------------------------------------
python
from selenium import webdriver
profile = webdriver.FirefoxProfile(accept_untrusted_cert=True)
driver = webdriver.Firefox(profile=profile)
Go to web site to check on untrusted certificate
There is a prompt now for certificate (why isn't it there any longer?)
[Also, don't I still need to specify which profile as follows?: profile = FirefoxProfile("Template")]
Select 'I Understand the Risks'
Select 'Add Exception'
Select 'Get Certificate'
Select 'Confirm Security Exception' (make sure Permanently Store is selected)
You are not logged into the site -- I can no longer add the certificate
firefox -P Template -no-remote
Still cannot add the certificate



So I'm back to my question -- could this be due to WebDriver changing file permissions
under ~/.mozilla/firefox/<Template>?

Reported by cathy.pedersen on 2011-02-16 15:57:49

[lukeis]

I need to rebuild the profile code by the looks :( sorry!

Reported by theautomatedtester on 2011-02-16 16:36:28

• Status changed: Accepted

[lukeis]

My workaround for this, by the way, was to find a trusted certificate for our product
and install that into the Firefox profile. Still would be nice to handle untrusted
certificates.

Reported by cathy.pedersen on 2011-02-17 15:37:44