1431881 - Provider for Google Calendar does not successfully query clients1.google.com/ocsp

Status: RESOLVED INVALID

(Calendar :: Provider: GData, defect)

Description

[Tem Hornaday]

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Build ID: 20180103231032

Steps to reproduce:

Configuration:  Win7SP1, Thunderbird 52.5.2, Lightning 5.4.5.2, Provider for Google Calendar 3.3.  Tools/Options/Advanced/Certificates "Query OCSP Responder" is checked.

Operation:  Choose: \File\New\Calendar..., On the Network, Next, Google Calendar, Next, <Enter Google Email address>, Next.



Actual results:

Operation hangs at this point.

Pop-up window (unreliably occurs), message from Provider:

"The Provider for Google Calendar would like to access your account <redacted>@google.com to retrieve events and tasks. Credentials and calendaring data is only transferred between your computer and Google, no third party sites are involved.

Secure connection failed

accounts.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: <a id="errorCode" title="SEC_ERROR_UNKNOWN_ISSUER">SEC_ERROR_UNKNOWN_ISSUER</a> 

    This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.
    If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.

Or you can add an exception…"  (Pressing "add an exception" link has no functional effect.)

================

Contents of Error Console:

reflow: 18.88ms function onxblpopupshowing, popup.xml line 259
reflow: 13.71ms
reflow: 18.76ms function onxblpopupshowing, popup.xml line 259
reflow: 2.76ms
reflow: 0.42ms function openCalendarWizard, calUtils.js line 361
InvalidStateError: An attempt was made to use an object that is not, or is no longer, usable  textbox.xml:233
[calGoogleSessionManager] Reusing session <redacted>@google.com  gdataSession.jsm:67:13
[calGoogleSession] Token expired 1516410054 seconds ago, resetting  gdataSession.jsm:338:13
[calGoogleCalendar] Logging in session <redacted>@google.com  gdataSession.jsm:233:13
[calGoogleCalendar] No access token for <redacted>@google.com, refreshing token  gdataSession.jsm:299:17
[calGoogleSession] Adding item https://www.googleapis.com/tasks/v1/users/@me/lists to queue  gdataSession.jsm:355:13
[calGoogleSession] Adding item https://www.googleapis.com/calendar/v3/users/me/calendarList to queue  gdataSession.jsm:355:13
GET https://accounts.google.com/o/oauth2/auth [0ms]
POST http://clients1.google.com/ocsp [HTTP/1.1 404 Not Found 135ms]
POST http://clients1.google.com/ocsp [HTTP/1.1 404 Not Found 75ms]
POST http://clients1.google.com/ocsp [HTTP/1.1 404 Not Found 74ms]
POST http://clients1.google.com/ocsp [HTTP/1.1 404 Not Found 70ms]
accounts.google.com:443 uses an invalid security certificate.  The certificate is not trusted because the issuer certificate is unknown.
The server might not be sending the appropriate intermediate certificates.
An additional root certificate may need to be imported.
Error code: <a id="errorCode" title="SEC_ERROR_UNKNOWN_ISSUER">SEC_ERROR_UNKNOWN_ISSUER</a>
  (unknown)
NS_ERROR_NOT_AVAILABLE: Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [nsIHttpChannel.responseStatus]






Expected results:

The Provider connects to Google Calendar and the operation proceeds to the "Sign In" pop-up window.

FWIW, this worked until very recently.  Not working as of 1/19/2018.  Don't know what changed.  If the "Query OCSP Responder" is unchecked and the operation repeated, the operation proceeds.

Comment 1

[Tem Hornaday]

Substitute "<redacted>@gmail.com" for "<redacted>@google.com" in all the above.  Apologies.  Was staring at this until I was zombified.

Comment 2

[armin.aha]

This also affects some Google sites in Firefox (see Bug 1431838)

Comment 3

[Martin Schröder [:mschroeder]]

Resolving as invalid because of bug 1431838 resolution.