Closed Bug 122165 Opened 23 years ago Closed 23 years ago

Error trying to validate certificate using OSCP - corrupted or unknown response

Categories

(Core Graveyard :: Security: UI, defect, P3)

1.0 Branch
x86
All
defect

Tracking

(Not tracked)

VERIFIED DUPLICATE of bug 130885
Future

People

(Reporter: mozilla-bugs, Assigned: ssaux)

References

()

Details

I have OCSP set to "validate only certs that specify an OCSP service URL". When
I go to https://www.mbnanetaccess.com/ , I get "Error trying to validate
certificate from www.mbnaaccess.com using OSCP - corrupted or unknown response.
Error Code: -8073" (and Mozilla never shows me the MBNA site). If I disable OCSP
use, the site is displayed fine.
This is 100% reproducible.

BTW, is it OCSP or OSCP? The Preferences tab have "OCSP" and the error message
has "OSCP"...

I am currently using BuildId 2002012619 on RedHat Linux 7.2
The typo is a bug. OCSP is the correct spelling.

OCSP supports needs some work.
Priority: -- → P3
Target Milestone: --- → Future
  I get this same error:

Error trying to validate certificate from sfads.osdn.com using OSCP - corrupted
or unknown response. Error Code: -8073

When logging into https://sourceforge.net/, actually when accessing ANY page
there using https rather than http.  I turned off my use of a proxy (I usually
use junkbuster) to check and the error is still there.

Currently using mozilla 2002013108.

I also have "Use OCSP to validate only certificates that specify an OCSP service
URL" selected in Privacy & Security -> Validation.  Using "Do not use OCSP for
certificate validation" also makes things work fine for me.

Basically another datapoint and site to test against.
OS -> All

Reproduced here with Win 2000 with https://www.supertel.se/ 
same validate OCSP prefs.

And Mozilla 0.9.8 [Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.8)
Gecko/20020204]
Another site to test against: https://www.cingular.com/customer_service/contact_us

Don't when a real fix is possible, but in the meantime, can the dialogue box be
changed to allow the user to choose to still see the site?
With https://sourceforge.net/ it gives the same error BUT displays the page
nonetheless (Moz098 on Win2k).
Strange that the sourceforge page displays but the cingular page doesn't. I've
tested both also using 0.9.8.
Happens at https://www.bancsabadell.com with mozilla 0.9.9/Linux.
Also bug 124521 bug 123114 seem to be duplicates of this bug.
Updated OS's since it occurs on other OS's
OS: Linux → All
The error message -8073 in words is "The OCSP server returned unexpected/invalid 
HTTP data."
This is a duplicate of Bug 130885

*** This bug has been marked as a duplicate of 130885 ***
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → DUPLICATE
Verified.
Status: RESOLVED → VERIFIED
Product: PSM → Core
Version: psm2.0 → 1.0 Branch
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.