182219 - Invalid certificates reported from apparently valid sites.

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect)

Description

[Bill Shapiro]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.1) Gecko/20020826
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.1) Gecko/20020826

At the URL listed above and another secure site (the "Log into online banking"
page on www.providentnj.com), I get the message "Error trying to validate
certificate from [site URL] using OCSP - response contains a date in the
future."  I get that message three times on the Wachovia site and twice on the
Provident site.  Because the problem does not occure with IE and because it
occurs on two different sites, I  conclude that it's a bug.

Reproducible: Always

Steps to Reproduce:
1.Enter the URL of the Wachovia site.
2.
3.

Actual Results:  
I got the message "Error trying to validate certificate from [site URL] using
OCSP - response contains a date in the future."

Expected Results:  
Let me onto the site(s).

Comment 1

[Matthias Versen [:Matti]]

-> PSM

Comment 2

[John Unruh]

Can you set OCSP back to its default setting and try again?
Edit>Prefs>Privacy>Validation> Do not use OCSP.
Also, with a newer nightly build from http://www.mozilla.org I do not get the
error message.

Comment 3

[Bill Shapiro]

------- Additional Comments From [e-mail]  2002-11-29 19:12 -------
Can you set OCSP back to its default setting and try again?

           Without OCSP enabled, I do not get the error message.

...
Also, with a newer nightly build from http://www.mozilla.org I do not get the
error message.

          Does the above statement mean that you don't get it even with OCSP
enabled?  If that's the case, do you recommend that I use the new build or that
I just forego OCSP?

           Thank you.

                                    Bill Shapiro

Comment 4

[John Unruh]

verified WFM. Reporter, you should be able to use OCSP without a problem with a
newer build, but unless you have a need for OCSP, you should leave it turned
off, to enhance performance if nothing else.