1746406 - Microsoft certificates fail to validate

Status: RESOLVED DUPLICATE of bug 1745600

(Core :: Security: PSM, defect)

Description

[nicoo]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/94.0

Steps to reproduce:

Attempt to access a Microsoft website, such as:

• docs.microsoft.com
• msdn.microsoft.com
• www.microsoft.com

Actual results:

Certificate validation fails with MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING

This occurs regardless of whether the following “security/privacy” setting is set:

Query OCSP responder servers to confirm the current validity of certificates

Expected results:

Certificate validation should (presumably) succeed.

The certificates currently served for those services do NOT have the OCSP-Must-Staple flag, so Firefox should honor the “Query OCSP responders” setting.

Comment 1

[nicoo]

Attachment: about:support.json

Here is the about:support information

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Security: PSM' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Comment 3

[nicoo]

PS: I was able to reproduce the issue in a fresh profile and on Firefox 95.0

Comment 4

[nicoo]

P.P.S: Also occurs under 96.0b5; all the test were made using the Mozilla-built FlatPak images.