202839 - Can not connect - OCSP corrupted or unknown response. Error -8073

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect)

Description

[Andrew King]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030401
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030401

When attempting to go to any banking sites, such as paypal.com, before page
loads I receive an error message - error trying to validate certificate using
OCSP, unknown or corrupted response.  Error code -8073
When you close the error box, the site does not open.

Reproducible: Always

Steps to Reproduce:
1. Goto www.paypal.com
2.
3.

Actual Results:  
error message in p[opup box as described above

Expected Results:  
Validate certificate and enter site

If I use IE, I can enter this site with no problems.

Comment 1

[Andrew King]

When entering under IE, after first page loads, and the login button is pushed,
a security warning pops up - Revocation information for the security certificate
for this site is not available.  Do you want to proceed.  (YEs / No / View
Certificate)

when attempting to view certificate, Mozilla trys to go to Verisign, and fails
with the same message as the original failure - corrupted or unknown response

Comment 2

[Matthias Versen [:Matti]]

Reporter:
Please close Mozilla, locate your Mozilla user-profile (see the 1.3 Release
notes for the path) and rename the file "cert7.db" , "key3.db"  and "secmod.db"
and try it again

-> PSM

Comment 3

[John Unruh]

The solution is to set OCSP back to its default setting, which is off.
Edit>Prefs>Privacy>Validation>Do not use OCSP.

Comment 4

[John Unruh]

*** Bug 203823 has been marked as a duplicate of this bug. ***

Comment 5

[John Unruh]

V