Unable to use self signed certificate in zotero (although configured according to the document)

Zhoujc · October 30, 2022

I really did like the link https://www.zotero.org/support/kb/cert_override said.
I use zotero 6.0.15, firefox 106.0.2, both in x64.
And I use Server version: Apache/2.4.52 (Ubuntu22.04) to host the webdav.
I can browse my webdav dir in firefox.
this is my cert_override.txt after removing the colon

# PSM Certificate Override Settings file
# This is a generated file! Do not edit.
ip:443 OID.XXXXX AAAAAAAAAAAAAAAXXXXXX

If any other information is needed, I'm happy to provide.

dstillman · October 30, 2022

Did you restart Zotero? Can you provide a Debug ID for a Verify Server attempt?

Zhoujc · October 31, 2022

Yes, I restarted Zotero and restart my system.
My Debug ID is D1163281537.

Ocod · December 6, 2022

Can confirm the bug, it used to work for years for me, and recently it has stopped working. I checked everything, I fixed the cert_override as usual, removing the extra ":" as well. I also tried with the ":" left on for good measure. For each try I restarted Zotero before testing (else the change is not taken into account). The webdav website is live and accessible from mozilla firefox given the exception is provided.

dstillman · December 6, 2022

@Ocod: Debug ID?

Ocod · December 6, 2022

Thanks for looking into it @dstillman
my Debug ID is D1650739646

williegagnon · March 14, 2023

Même problème ici. La procédure décrite ici ne fonctionne pas : https://www.zotero.org/support/kb/cert_override Debug ID D626801755

williegagnon · March 24, 2023

Problème résolu. Il faut utiliser Firefox 60 ESR. Firefox 111.0.1 ne fonctionne pas (je ne sais pas pour les autres versions…). La séquence de lettres « MU » manque au fichier cert_override.txt de la version 111.0.1. J’ai installé l’ancienne version de Firefox (60 ESR) depuis https://support.mozilla.org/en-US/kb/install-older-version-firefox et j’ai suivi à nouveau les instructions https://www.zotero.org/support/kb/cert_override

williegagnon · March 24, 2023

« M : allow mismatches in the hostname
U : allow untrusted certs (whether it's self signed cert or a missing or invalid issuer cert) »
https://boblord.livejournal.com/18402.html

cass00 · November 7, 2023

As for williegagnon's solution adding "MU" instead of only "U" worked for me. Maybe this could be added to the docs (https://www.zotero.org/support/kb/cert_override)