是否可以为firefox编写greasemonkey脚本或插件来自动添加安全异常？
是否可以为firefox编写greasemonkey脚本或插件来自动添加安全异常？
我有很多愚蠢的用户，我真的需要为我的两个具有错误证书的 Intranet 页面自动执行此操作。
非常感谢。
Is it posible to write greasemonkey script or add-on for firefox to automaticly add security exception ?
I have plenty of dumb users and I really need to automate this for two of my intranet pages which have wrong certificates.
Thank you very much.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我希望不会，因为这将是一个巨大的安全漏洞！您应该为您的站点创建正确的证书。创建 CA 并在用户的浏览器上安装公共 CA 证书，以便站点证书有效。通过 Google 可以找到大量文章和操作指南，解释如何推出自己的 CA 并为您的网站创建证书。
I hope not as that would be a huge security hole ! You should create correct certificates for your sites instead. Create a CA and install the public CA certificate on your user's browser so the site certificates will be valid. There are plenty of articles and howtos found via Google that explain how to roll your own CA and create certificates for your sites.
这在油猴里是绝对不可能的。使用 Firefox 扩展可能是可能的——但是其他浏览器上的用户呢？
首先，问题是由“www.yourserver.com”与“yourserver.com”（或其他一些子域问题）引起的吗？
如果是这样，请设置重定向，以便“www.yourserver.com”始终映射到“yourserver.com”，和/或从子域切换到子文件夹结构（“somesite.yourserver.com”变为“yourserver.com/somesite/” “ 反而）。
如果不是这样，那么正如 Darkdust 所说，要么 (1) 让你的老板帮你向 IT 部门施压，要么 (2) 绕过 IT 部门。
您只需花费 10 美元即可获得有效证书。有时需要在内联网上进行一些调整，但这是可行的。
This is definitely not possible in Greasemonkey. It is probably possible with a Firefox extension -- but then what about users on other browsers?
First, is the problem caused by "www.yourserver.com" versus "yourserver.com" (or some other subdomain issue)?
If so, set redirects so that "www.yourserver.com" always maps to "yourserver.com", and/or switch from a subdomain to a subfolder structure ("somesite.yourserver.com" becomes "yourserver.com/somesite/" instead).
If that's not it, then as Darkdust said, either (1) Get your boss to help you pressure the IT department or (2) Go around the IT department.
You can get valid certificates for as little as $10. Sometimes it takes a little tweaking on an intranet, but it's doable.