273470 - The SSL certificate used by bugzilla specifies an OCSP server that is not available from behind a proxy

Status: VERIFIED DUPLICATE of bug 111384

(mozilla.org Graveyard :: Server Operations, task)

Description

[simon annear]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20041204
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20041204

When you have OCSP (certificate validation) enabled within mozilla you can't
connect to the https://bugzilla.mozilla.org because the certificate cannot be
verified

Reproducible: Always
Steps to Reproduce:
1. Open Mozilla Suite Browser
2. Edit, Preferences, Privacy & Security, Validation
3. Select "Use OCSP to validate only certificates that specify an OCSP.....
4. Go to https://bugzilla.mozilla.org
Actual Results:  
You get an error saying that the certificate cannot be verified

Expected Results:  
I would have expected the cert to be verified and for the browser to establish
an https connection to bugzilla

This should be fixed by getting a new ssl server cert for
https://bugzilla.mozilla.org which either specifies a valid ocsp server or
doesn't have this option specified.

Comment 1

[Dave Miller [:justdave]]

I can't reproduce this.  Following the steps to reproduce does not deny me
access to bugzilla.mozilla.org using Firefox 1.0.  As far as I can tell,
bugzilla.mozilla.org's certificate does not include an OCSP URL, so if it's
failing to validate with the option to only verify certificates that have a URL
supplied, I would suggest this is probably a bug in the Mozilla app suite (which
I don't have handy to try it at the moment).

Comment 2

[OstGote!]

Hmm ... do you use a proxy? Then OCSP does not work, see bug 220974/bug 111384.
That is the reason why I never can use it.

Comment 3

[simon annear]

updated summary to reflect fact that this only happens behind proxy server.

Set dependency on bug 111384

Comment 4

[Dave Miller [:justdave]]

*** This bug has been marked as a duplicate of 11384 ***

Comment 5

[Dave Miller [:justdave]]

grrrr

Comment 6

[Dave Miller [:justdave]]

let's try this again

*** This bug has been marked as a duplicate of 111384 ***

Comment 7

[Matthias Versen [:Matti]]

verified