Suppress Firefox/Firebug SHA-1 warning

Question

I use Firebug for web development. Since version Firefox 37 I see the following annoying message in my console:

This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1"

I understand that it is an important message, but it is duplicated many times and makes my work almost impossible. Moreover, it appears every time my page communicates with other pages, for example with Google Analytics and other counters. So if I were to update my certificate, this message would still appear because these sites would have SHA-1. So any site with GA gives me trouble.

How can I disable or filter this message?

Answer 1

you can get rid of the message, but you have to modify firebugs code.

Sorry forgot to mention you need to convert the .xpi to .zip and extract the files first. You can leave the folder as is when done or zip it and convert it to an xpi again. You will need to restart Firefox.

1. locate the pluggin in your firefox profile dirctor and go to this file "\extensions\firebug@software.joehewitt.com\content\firebug\console\errors.js".
2. search for "logScriptError: function(context, object, isWarning)".
3. After the code "var error = new ErrorMessageObj(object.errorMessage, object.sourceName, object.lineNumber, object.sourceLine, category, context, null);".

input the following code:

if(error.message.indexOf('SHA-1') != -1 || error.message.indexOf('Security Policy') != -1){
            return false;
        }

should be about line 330.

Answer 2

As stated in the Firebug discussion group, Firebug's Console panel currently (Firebug 2.x) cannot filter single messages out. You can only filter by messages matching a specific text using the search field.

There are enhancement requests like issue #4507 reported to add such a filter, though it is unlikely that this will get implemented in Firebug, especially not in version 2.x, directly.

Firebug 3 will integrate into the built-in DevTools, which allow you to filter those warnings by unchecking Warnings within the Security menu inside the Console panel:

Besides that I created bug 1170476 asking to reduce the messages to a minimum.

Update:

Firebug development is discontinued. Instead, there is a Firebug theme available within the Firefox DevTools starting from Firefox 48. Bug 1170476 is fixed since Firefox 42, so you will only see one message logged with a counter showing how often the message occurred.

Answer 3

Select the Console tab and, keeping pressed Ctrl on the keyboard, click on Errors, Info, Debug Info, Cookies.

Bear in mind that this will disable the output of all the warnings logged in Firebug and not only the ones generated by googleapis.

Answer 4

Remove HTTPS from the URL or keep all resources local.