132344 - ocsp validation errors

Status: VERIFIED DUPLICATE of bug 130885

(Core Graveyard :: Security: UI, defect)

Description

[bill]

Turning on OCSP validation checking appears to cause problems with well-known
websites.

steps to reproduce:
- go to "edit->preferences->privacy&security->validation"
- choose the 2nd option "Use OCSP to validate only certificates that specify an
OCSP service URL"
- close the prefs window

go to the following websites (I've encountered errors on these):
1) http://www.united.com/easyupdate.  Click on the "login" button in the middle
of the page.

You should get an error "Error trying to validate certificate from www.ua2go.com
using OCSP - response contains a date which is in the future.
{My hunch is that a GMT/timezone calculation is getting screwed up.}

2) Go to http://us.etrade.com
You should get the error "Error trying to validate certificate from
us.etrade.com using OCSP - corrupted or unknown response.  Error Code: -8073"
You are then unable to connect to the website.

Comment 1

[John Unruh]

*** This bug has been marked as a duplicate of 130885 ***

Comment 2

[John Unruh]

Verified dupe.