Secure Connection Failed - sec_error_ocsp_invalid_signing_cert on clientportal.phx-online.com

RESOLVED WORKSFORME

Status

()

Core
Security: PSM
RESOLVED WORKSFORME
3 years ago
2 years ago

People

(Reporter: Andy Choi, Unassigned)

Tracking

38 Branch
Points:
---

Firefox Tracking Flags

(firefox38.0.5 affected, firefox39 ?, firefox40 affected, firefox41 ?)

Details

(URL)

(Reporter)

Description

3 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; EIE10;ENUSWOL; rv:11.0) like Gecko

Steps to reproduce:

Go to https://clientportal.phx-online.com/


Actual results:

Secure Connection Failed

An error occurred during a connection to clientportal.phx-online.com. Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.


Expected results:

I can access the "https://clientportal.phx-online.com" url from IE or Chrome with no issues. When I access the site from FireFox, it shows the above "Secure connection Failed" error. I checked our SSL cert using "https://www.digicert.com/help/" and it indicates that our cert is correct. Please help

Comment 1

3 years ago
Beta, FDE and Nightly all load the link.

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
20150601171003
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0
20150604004008
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0
20150604030205


Unrelated to this, SSL Labs reports some severe security issues:
https://www.ssllabs.com/ssltest/analyze.html?d=clientportal.phx-online.com
status-firefox38.0.5: --- → affected
status-firefox39: --- → unaffected
status-firefox40: --- → unaffected
status-firefox41: --- → unaffected
Component: Untriaged → Security: PSM
Product: Firefox → Core
Summary: Secure Connection Failed on FireFox only → Secure Connection Failed - sec_error_ocsp_invalid_signing_cert - in Firefox 38.0.5 only

Comment 2

3 years ago
This happens intermittently, and I've reproduced on 38.0.5 and 40.

May or may not be something wrong with the CA's OCSP responder.
status-firefox39: unaffected → ?
status-firefox40: unaffected → affected
status-firefox41: unaffected → ?
Summary: Secure Connection Failed - sec_error_ocsp_invalid_signing_cert - in Firefox 38.0.5 only → Secure Connection Failed - sec_error_ocsp_invalid_signing_cert on clientportal.phx-online.com
(Reporter)

Comment 3

3 years ago
What should be the next step then? This does not happen with either IE or Chrome.
(Reporter)

Comment 4

3 years ago
I have tried Firefox 39 and there is no issue

Comment 5

2 years ago
Sorry for the late response.

I can't get this to reproduce anymore, and it looks like the issue is gone for you as well.
I suspect it was a misconfiguration on the CA side.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.