Allow firmware update and track upload with failed ca check after additional confirmation

[amandel]

This might be needed if:

• servers out of our control use new root cas which we do not trust yet
• during development or debugging of for fresh portals there might be no valid cert available
• we need to workaround errors