439527 - OCSP Certificate problem with Firefox

Status: RESOLVED WORKSFORME

(Core :: Security: PSM, defect)

Description

[Carl Mintz]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14

It would appear that they have made a setting change to cause FireFox to use something called "OCSP" to verify certificates, and OCSP doesn't understand the certificate issuer to be valid.  This is a known issue with FireFox and certain certificate issuers, but there isn't much we can do other than to have them return the settings to the default "Do Not Use OCSP for verification" or use IE for the site instead. 
  
To change that setting, the user would go to Tools > Options > Advanced > click on the "Encryption" tab, then click the "Verification" button and select "Do not use OCSP".  Restart FireFox, return to the site, and if they want to reset the settings after that, that's up to them. 


Reproducible: Always

Steps to Reproduce:
Happens ever time I try to access my HCMG account.
Actual Results:  
You should try to set an account yourself and see what happens.

Expected Results:  
When I try to click onto the patient area using the FireFox browser I continually get an error message - error establishing an encrypted connection to www.hcmg.net. Error code -8048. 

Fix the "certificate Issuer" problem.

Comment 1

[Matthias Versen [:Matti]]

This is no Firefox issue, this is usually a server issue.
(example bug 376480)

You selected error console as compoent but i can not see that you have a Problems with the error Console (Tools/Error Console) moving to Core:PSM but I expect that this bug is invalid

Comment 2

[Carl Mintz]

From both my standpoint that of another tech person whom I showed the problem, we both believe that it's a Firefox problem as the web site in question works properly with both IE and Opera.

Comment 3

[Jo Hermans]

Works for me in Firefox 3.6.2 (using <https://www.hcmg.net/about/csContact.asp>) - it must have been a server problem. Problems can occur when the intermediate certificate can not be downloaded, either through misconfiguration (see bug 376480 comment 12) or temporary errors.