1184203 - Seeing lots of >sec_error_ocsp_invalid_signing_cert< & >sec_error_unknown_issuer< errors

Status: RESOLVED DUPLICATE of bug 1183822

(Core :: Security, defect)

Description

[matthias koplenig [:metasieben]]

Attachment: sec_error_unknown_issuer.png

For about a week i'm seeing lots of >sec_error_ocsp_invalid_signing_cert< & >sec_error_unknown_issuer< errors while browsing with Nightly(42), for example here:

* https://www.amazon.de/gp/css/order-history/ref=nav__gno_yam_yrdrs
* https://www.verbund.com/at/de/haushalte/services

is there any way to debug this?

most of the time refreshing the site, after waiting a few minutes seems to resolve the problem.

Comment 1

[matthias koplenig [:metasieben]]

Attachment: sec_error_ocsp_invalid_signing_cert.png

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

In about:config, what's the value of security.OCSP.require? If it's set to true, then this is the same as bug 1183822 for the sec_error_ocsp_invalid_signing_cert errors.

Comment 3

[matthias koplenig [:metasieben]]

yep. >security.OCSP.require< is set to TRUE.

thx, duping it.