ssh proxy connection used to work with Firefox, now doesn't

Darren Tucker dtucker at
Mon Oct 11 19:13:37 AEDT 2021

On Mon, 11 Oct 2021 at 18:54, Chris Green <cl at> wrote:
> I used to use the following ssh command to set up a socks5 proxy to
> use with Firefox:-
>     ssh -fC2qTnN -D 8080 chris at

8080 is more often used for http proxies whereas 1080 is the
registered port for SOCKS.  Which are you using?

> I'm pretty certain it's nothing to do with certificates etc. at

It's serving up at least some expired certificates:

$ openssl s_client -debug -connect
depth=0 CN = *
verify error:num=10:certificate has expired
notAfter=Dec  8 16:21:36 2016 GMT
verify return:1
depth=0 CN = *
notAfter=Dec  8 16:21:36 2016 GMT
verify return:1

Darren Tucker (dtucker at
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA (new)
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list