1037364 - When OSCP fails, it treats it as invalided even if the option isn't enabled

Status: RESOLVED WORKSFORME

(Core :: Security: PSM, defect)

Description

[kud]

Attachment: Screen Shot 2014-07-11 at 11.16.37.png

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:33.0) Gecko/20100101 Firefox/33.0 (Beta/Release)
Build ID: 20140710030200

Steps to reproduce:

On OSCP fail, I've got "sec_error_ocsp_unknown_cert". It doesn't ask me if I want to add the certificate even if I don't have "treat as invalid" enabled.

I had to disable OSCP to go on certains websites like airbnb or npmjs.

Comment 1

[YF (Yang)]

I can reproduce this problem when visit https://www.airbnb.com/ or https://www.npmjs.org/ at now.

However, the option description is "When an OCSP server connection fails, treat the certificate as invalid", the "sec_error_ocsp_unknown_cert" is not a "connection fails".

Comment 2

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

I suspect that this is/was a dupe of bug 1045739. The given sites are working fine now.

Comment 3

[kud]

Yes, airbnb works for me now, with the option enabled.