User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050702 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050702 MSG BOX: "Error trying to validate certificate from www.e-gold.com using OCSP- server is busy. Please try again later". Url: https://www.e-gold.com/ First experienced this problem on 5/10. Never had the problem before. NO problem in opening with IE. No problem opening any other site. Reproducible: Always Steps to Reproduce: 1.Use bookmark 2.Use url 3. Actual Results: I am able to access the site via IP address, without this error. http://220.127.116.11/ as a work around Expected Results: For site to open from bookmark or url about:buildconfig Build platform target i586-pc-msvc Build tools Compiler Version Compiler flags $(CYGWIN_WRAPPER) cl 12.00.8804 -TC -nologo -W3 -Gy -Fd$(PDBFILE) $(CYGWIN_WRAPPER) cl 12.00.8804 -TP -nologo -W3 -Gy -Fd$(PDBFILE) Configure arguments --enable-application=browser --enable-update-channel=release --enable-optimize --disable-debug --disable-tests --enable-static --disable-shared --enable-official-branding --enable-svg --enable-canvas --enable-update-packaging
When I use the IP address, the site does load, however, when I try to "Access Account", then I get the same MSG BOX.
(In reply to comment #1) > When I use the IP address, the site does load, however, when I try to "Access > Account", then I get the same MSG BOX. > Lynn, please read the help functions for Bugzilla, especially those about Resolving bugs :) https://bugzilla.mozilla.org/page.cgi?id=fields.html#resolution No patch has been checked in for this bug -> reopening Moreover, am i correct in stating that you still see the problem you originally observed?
https://www.e-gold.com/ uses a verisign class 3 cert, bearing the following OCSP responder information: Name: Authority Information Access Method: PKIX Online Certificate Status Protocol Location: URI: "http://ocsp.verisign.com" Our OCSP client attempts to connect to ocsp.verisign.com on TCP port 80 and, in my testing, the TCP "SYN" (connection request) gets no response. Thus, the report that the "OCSP Server is busy" seems to be correct, and working as designed. OCSP is only used for https URLs, not http URLs. The use of IP addresses in dotted decimal form is irrelevant. https://www.e-gold.com/ gets the same response as https://18.104.22.168/
Although this is not a defect in mozilla browsers, I am going to reopen this bug, to mark it a duplicate of bug 363452.
*** This bug has been marked as a duplicate of 363452 ***