From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 1047A138CC0 for ; Thu, 19 Mar 2015 15:30:39 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AF22AE0983; Thu, 19 Mar 2015 15:30:28 +0000 (UTC) Received: from cdptpa-oedge-vip.email.rr.com (cdptpa-outbound-snat.email.rr.com [107.14.166.232]) by pigeon.gentoo.org (Postfix) with ESMTP id A5201E094B for ; Thu, 19 Mar 2015 15:30:27 +0000 (UTC) Received: from [142.196.200.180] ([142.196.200.180:52689] helo=navi.localnet) by cdptpa-oedge01 (envelope-from ) (ecelerity 3.5.0.35861 r(Momo-dev:tip)) with ESMTP id 0F/0A-03101-39BEA055; Thu, 19 Mar 2015 15:30:27 +0000 From: Fernando Rodriguez To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: Is this a bug in firefox-36.0? Date: Thu, 19 Mar 2015 11:29:57 -0400 Message-ID: <50972182.mg828J0U53@navi> User-Agent: KMail/4.14.3 (Linux/3.19.1; KDE/4.14.3; x86_64; ; ) In-Reply-To: References: <3321648.fbEnVcYaRz@navi> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3627888.Y6MKoKmpU4"; micalg="pgp-sha1"; protocol="application/pgp-signature" X-RR-Connecting-IP: 107.14.168.118:25 X-Cloudmark-Score: 0 X-Archives-Salt: f815e892-63b9-4c6c-999d-2176183eddf7 X-Archives-Hash: 63b37d1d7419ae452a8dcc04109ebb16 --nextPart3627888.Y6MKoKmpU4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="us-ascii" On Thursday, March 19, 2015 3:57:05 AM walt wrote: > On 03/18/2015 06:06 PM, Fernando Rodriguez wrote: > > On Wednesday, March 18, 2015 4:41:25 PM walt wrote: > >> On 03/17/2015 04:49 PM, walt wrote: > >>> I get a certificate verification error when visiting https://www.= att.com > >>> using firefox-36.0, but not when using chrome-41.0.2272.76. > >> > >> Thanks to all who replied. I'm surprised by the variety of differ= ent=20 results > >> you reported. > >> > >> (BTW, I'm running firefox-bin-36.0, so the behavior may be a bit d= ifferent=20 > > from > >> the gentoo build.) > >> > >> FF will not even show me the secure att.com webpage. I get an ent= ire=20 html=20 > > page > >> with this (very big) error message: > >> > >> Secure Connection Failed > >> > >> An error occurred during a connection to www.att.com. The OCSP ser= ver=20 > > experienced > >> an internal error. (Error code: sec_error_ocsp_server_error) > >> > >> The page you are trying to view cannot be shown because the authen= ticity=20 of=20 > > the > >> received data could not be verified. > >> > >> Please contact the website owners to inform them of this problem. > >> > >> > >=20 > > That sounds more like a networking issue. Are you behind a firewall= ? Is it=20 > > possible that you somehow blocked their OCSP server? Can you bypass= the=20 > > firewall for testing? >=20 > Wow, creepy. I forced a warm reboot of my home wireless router and t= he=20 problem > went away. I now see the gray triangle with the ! and I have no idea= how=20 long > ago that started. I probably just didn't notice it until this router= screw- up > happened. And I don't even want to think about why my home router su= ddenly > changed behavior :( It probably started Jan 20 when they renewed the certificate. See=20 http://www.certificate-transparency.org/ev-ct-plan (from Mick's link). = It=20 refers to chrome but probably applies to firefox as well. =2D-=20 Fernando Rodriguez --nextPart3627888.Y6MKoKmpU4 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABAgAGBQJVCut8AAoJEPbOFX/5Ulwc/MYP/1+qUJWZs6eDU+c0ubDUQRQd iRop44u3zYgWNYy1EM6Use9Yo93cQHqbs0h5iKy+jIC4NYpJIZJLqdEWJBuJwjNI 0DvTK8rhdmfa3rgLBWekYyq1UUPXZwcfdrWSWd+w2k6kseXxDgOTskDJSqro6cOW 6X9iEzdntVRISjh8mYIm70dZq/c4aMYZI3FCaaJIrqvyAAw2qbnQr8Uj5F+bGgiK WO+7Iw1HWZC3mg2j5K8NifOE0/L7Fkth0NUfNEwAZDBzBp82C+j+QggD7s48XVNS RtpxNa12SY/dOIyywcC1CZZsqUV0AA6RCsZwkUm78h5ZJa9KZM1jCn4GGp1h5n3N LgbZ/CTNEFVZSFBx7jnO3UPvRuMu3bwYaRgOzAdcD9V2UUxunoCIwXHVYAlvHo+D 9YQvzCZpjSOUPtlmBvIsQBA0GkmgmsFX1GNDKmoWwpGsd5FHQuzMHREOyoX0UH70 Ie+iP3+dHN+tIjtX4h4s6XYNhIMA/ytCUCZ7xO4w8DVrCF4uCeajpc1NLITE1BiY sJ0pq7h8aDgGxxQ7xuHU1CSKKKQDIc1Xp4tw6qcx6Pvj7afsECO5W3A4rBrF88l9 B5gExGeWTXaSIX3FfmcVGYUkg8bw3CSGjla6rktQ31ny/6Lj7X0mKAjuMGS++u1s 2Jj1cCindqnrVFJNqMTs =JCis -----END PGP SIGNATURE----- --nextPart3627888.Y6MKoKmpU4--