The SSL certificate used by bugzilla specifies an OCSP server that is not available from behind a proxy

VERIFIED DUPLICATE of bug 111384

Status

VERIFIED DUPLICATE of bug 111384
14 years ago
4 years ago

People

(Reporter: simon, Assigned: myk)

Tracking

Details

(URL)

(Reporter)

Description

14 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20041204
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20041204

When you have OCSP (certificate validation) enabled within mozilla you can't
connect to the https://bugzilla.mozilla.org because the certificate cannot be
verified

Reproducible: Always
Steps to Reproduce:
1. Open Mozilla Suite Browser
2. Edit, Preferences, Privacy & Security, Validation
3. Select "Use OCSP to validate only certificates that specify an OCSP.....
4. Go to https://bugzilla.mozilla.org
Actual Results:  
You get an error saying that the certificate cannot be verified

Expected Results:  
I would have expected the cert to be verified and for the browser to establish
an https connection to bugzilla

This should be fixed by getting a new ssl server cert for
https://bugzilla.mozilla.org which either specifies a valid ocsp server or
doesn't have this option specified.
Assignee: mozilla.webmaster → myk
Component: webmaster@mozilla.org → Server Operations
QA Contact: daniel.bugmail → justdave
I can't reproduce this.  Following the steps to reproduce does not deny me
access to bugzilla.mozilla.org using Firefox 1.0.  As far as I can tell,
bugzilla.mozilla.org's certificate does not include an OCSP URL, so if it's
failing to validate with the option to only verify certificates that have a URL
supplied, I would suggest this is probably a bug in the Mozilla app suite (which
I don't have handy to try it at the moment).

Comment 2

14 years ago
Hmm ... do you use a proxy? Then OCSP does not work, see bug 220974/bug 111384.
That is the reason why I never can use it.
(Reporter)

Comment 3

14 years ago
updated summary to reflect fact that this only happens behind proxy server.

Set dependency on bug 111384
Depends on: 111384
Summary: The SSL certificate used by bugzilla specifies and OCSP server that is not available → The SSL certificate used by bugzilla specifies and OCSP server that is not available from behind a proxy
Summary: The SSL certificate used by bugzilla specifies and OCSP server that is not available from behind a proxy → The SSL certificate used by bugzilla specifies an OCSP server that is not available from behind a proxy

*** This bug has been marked as a duplicate of 11384 ***
Status: UNCONFIRMED → RESOLVED
Last Resolved: 14 years ago
No longer depends on: 111384
Resolution: --- → DUPLICATE
grrrr
Status: RESOLVED → UNCONFIRMED
Resolution: DUPLICATE → ---
let's try this again

*** This bug has been marked as a duplicate of 111384 ***
Status: UNCONFIRMED → RESOLVED
Last Resolved: 14 years ago14 years ago
Resolution: --- → DUPLICATE
verified
Status: RESOLVED → VERIFIED
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.