255482 - Error with directory (OCSP) lookup for cert on https

Status: RESOLVED INVALID

(Core Graveyard :: Security: UI, defect)

Description

[Jim Race]

To reproduce:

1) Open: http://www.tracksafety.org/
2) Click the Website tonight or Website Complete links in the right hand column

results: A modal error dialog is displayed which reads:

"Error trying to resolve certificate from www.godaddy.com using  OCSP -
directory lookup error."

expected results: The requested page is opened.

Comment 1

[Olivier Cahagne]

wfm using FF trunk 20040802 on Win2k.

Comment 2

[Jim Race]

Forgot to mention. Browser this failed with was:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.2) Gecko/20040803

Comment 3

[:Gavin Sharp [email: [e-mail]]]

*** Bug 269510 has been marked as a duplicate of this bug. ***

Comment 4

[Josh Birnbaum]

The certificate lists an OCSP server of ocsp.starfieldtech.com, which doesn't exist.

As long as you have OCSP enabled in your preferences, you won't be able to get
to sites using starfieldtech/godaddy certs.

Marking invalid, the crypto code is working as expected.

Comment 5

[Chris Embree]

Thanks for the info.  Resolved the issue for me.

Comment 6

[Josh Birnbaum]

I asked Starfield support if they had anything to say on the matter.  They
responded: "We currently do not support OCSP but the server is listed in the
certificate so that every certificate we issue will work when we start
supporting it."

Comment 7

[Chris Embree]

Josh,  did you ask them what the hell that means?  It sounds like "no, but when
we do it will be great!"  Are the taking lessons from M$?

Comment 8

[Josh Birnbaum]

Their support address is [e-mail], if you want to discuss it
further.  Your interpretation of the email does match mine, though.