337626 - error message "OCSP Server is busy"

Status: RESOLVED DUPLICATE of bug 363452

(NSS :: Libraries, defect)

Description

[Lynn Langford]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050702
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050702

  MSG BOX:  "Error trying to validate certificate from www.e-gold.com using OCSP- server is busy. Please try again later".

Url: https://www.e-gold.com/

First experienced this problem on 5/10.  Never had the problem before.
NO problem in opening with IE.
No problem opening any other site.

Reproducible: Always

Steps to Reproduce:
1.Use bookmark
2.Use url
3. 

Actual Results:  
I am able to access the site via IP address, without this error.

http://209.200.169.10/
as a work around

Expected Results:  
For site to open from bookmark or url

about:buildconfig

Build platform
target
i586-pc-msvc

Build tools
Compiler 	Version 	Compiler flags
$(CYGWIN_WRAPPER) cl 	12.00.8804 	-TC -nologo -W3 -Gy -Fd$(PDBFILE)
$(CYGWIN_WRAPPER) cl 	12.00.8804 	-TP -nologo -W3 -Gy -Fd$(PDBFILE)

Configure arguments
--enable-application=browser --enable-update-channel=release --enable-optimize --disable-debug --disable-tests --enable-static --disable-shared --enable-official-branding --enable-svg --enable-canvas --enable-update-packaging

Comment 1

[Lynn Langford]

When I use the IP address, the site does load, however, when I try to "Access Account", then I get the same MSG BOX.

Comment 2

[Patrick]

(In reply to comment #1)
> When I use the IP address, the site does load, however, when I try to "Access
> Account", then I get the same MSG BOX.
> 

Lynn, please read the help functions for Bugzilla, especially those about Resolving bugs :)

https://bugzilla.mozilla.org/page.cgi?id=fields.html#resolution

No patch has been checked in for this bug -> reopening

Moreover, am i correct in stating that you still see the problem you originally observed?

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

https://www.e-gold.com/ uses a verisign class 3 cert, bearing the following
OCSP responder information:

            Name: Authority Information Access
            Method: PKIX Online Certificate Status Protocol
            Location:
                URI: "http://ocsp.verisign.com"

Our OCSP client attempts to connect to ocsp.verisign.com on TCP port 80 and,
in my testing, the TCP "SYN" (connection request) gets no response.  
Thus, the report that the "OCSP Server is busy" seems to be correct,
and working as designed.  

OCSP is only used for https URLs, not http URLs.  The use of IP addresses 
in dotted decimal form is irrelevant.  https://www.e-gold.com/ gets the 
same response as https://209.200.169.10/

Comment 4

[Nelson Bolyard (seldom reads bugmail)]

Although this is not a defect in mozilla browsers, I am going to reopen this
bug, to mark it a duplicate of bug 363452.

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

*** This bug has been marked as a duplicate of 363452 ***