Remove the annoying certificate error page when running selenium tests

Selenium and webdriver tests are everywhere these days. They can be often slow and flaky, but you need to run them to make sure you didn’t break anything.

cf.For more information on selenium webdriver, go to selenium webdriver documentation.

Often what I find is I run selenium tests and start doing something as they take time to run. Then the tests are not running. Firefox stopped with certificate error! You have to add the certificate again to run those tests. It happens again and again, and as you are not a machine, you get tired mentally and emotionally. This is my story with selenium tests, so far.

There are a few ways to get around this certificate error. (I can’t say it’s annoying, as it warns you against the fraudulent websites.)

cert_override.txt

This is a text file gerated in the user profile to store SSL certificate expections, if a user specifies it.
Here is an example.

Fields

Files are separated by a tab character, and each line is finished by a line feed character.

1. domainname:port : port 443 for HTTPS (SSL)
2. hash algorithm OID

  • SHA1-256: OID.2.16.840.1.101.3.4.2.1 (most used)
  • SHA-384: OID.2.16.840.1.101.3.4.2.2
  • SHA-512: OID.2.16.840.1.101.3.4.2.3

3. Certificate fingerprint using previous hash algorithm

4. One or more characters for override type:

  • M : allow mismatches in the hostname
  • U : allow untrusted certs (whether it’s self signed cert or a missing or invalid issuer cert)
  • T : allow errors in the validity time, for example, for expired or not yet valid certs

5. Certificate’s serial number and the issuer name as a base64 encoded string

Firefox profile

In order to edit the file, you would have to find the file first, and it was tricky to locate Firefox profile.
If you are on windows 7 or windows server 2008 like me, click on Windows Start and type %APPDATA%\Mozilla\Firefox\Profiles\ in the search box.
If you on a earlier version of windows, please go to a mozilla support page for the profile location.

Remove the annoying certificate error page when running selenium tests

3 thoughts on “Remove the annoying certificate error page when running selenium tests

  1. Jose says:

    Yes, but for some reason I need a certificate in the testing environment and we can’t have a valid one, so this is a good help. But, may I ask how to fix this for IE and Chrome? Thanks in advance

  2. Michael Schieber says:

    Hi,
    nice tipp.
    But you said “Certificate’s serial number and the issuer name as a base64 encoded string”
    How do you generate this string beginning with AAAA… ?

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s