Secure Connection Failed - sec_error_ocsp_invalid_signing_cert on




Security: PSM
3 years ago
2 years ago


(Reporter: Andy Choi, Unassigned)


38 Branch

Firefox Tracking Flags

(firefox38.0.5 affected, firefox39 ?, firefox40 affected, firefox41 ?)





3 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; EIE10;ENUSWOL; rv:11.0) like Gecko

Steps to reproduce:

Go to

Actual results:

Secure Connection Failed

An error occurred during a connection to Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

Expected results:

I can access the "" url from IE or Chrome with no issues. When I access the site from FireFox, it shows the above "Secure connection Failed" error. I checked our SSL cert using "" and it indicates that our cert is correct. Please help

Comment 1

3 years ago
Beta, FDE and Nightly all load the link.

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0

Unrelated to this, SSL Labs reports some severe security issues:
status-firefox38.0.5: --- → affected
status-firefox39: --- → unaffected
status-firefox40: --- → unaffected
status-firefox41: --- → unaffected
Component: Untriaged → Security: PSM
Product: Firefox → Core
Summary: Secure Connection Failed on FireFox only → Secure Connection Failed - sec_error_ocsp_invalid_signing_cert - in Firefox 38.0.5 only

Comment 2

3 years ago
This happens intermittently, and I've reproduced on 38.0.5 and 40.

May or may not be something wrong with the CA's OCSP responder.
status-firefox39: unaffected → ?
status-firefox40: unaffected → affected
status-firefox41: unaffected → ?
Summary: Secure Connection Failed - sec_error_ocsp_invalid_signing_cert - in Firefox 38.0.5 only → Secure Connection Failed - sec_error_ocsp_invalid_signing_cert on

Comment 3

3 years ago
What should be the next step then? This does not happen with either IE or Chrome.

Comment 4

3 years ago
I have tried Firefox 39 and there is no issue

Comment 5

2 years ago
Sorry for the late response.

I can't get this to reproduce anymore, and it looks like the issue is gone for you as well.
I suspect it was a misconfiguration on the CA side.
Last Resolved: 2 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.