[gentoo-user] Unable to access bugs.gentoo.org

[gentoo-user] Unable to access bugs.gentoo.org

[Graham Murray]

For the last day or so, every time I try to access b.g.o I get an OCSP
error "(Error code: sec_error_ocsp_bad_http_response)" in firefox. I
have seen this error before but it is normally transient and only lasts
a few minutes. 

Are others seeing this or is it a problem at my end? Other https sites
load with no problem.

Re: [gentoo-user] Unable to access bugs.gentoo.org

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 553 bytes --]

On Sunday 06 Nov 2011 08:48:45 Graham Murray wrote:
> For the last day or so, every time I try to access b.g.o I get an OCSP
> error "(Error code: sec_error_ocsp_bad_http_response)" in firefox. I
> have seen this error before but it is normally transient and only lasts
> a few minutes.
> 
> Are others seeing this or is it a problem at my end? Other https sites
> load with no problem.

What is the setting of:

  security.OCSP.disable_button.managecrl

when you type about:config and enter OCSP in the search field?
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-user] Unable to access bugs.gentoo.org

[Graham Murray]

Mick <michaelkintzios@gmail.com> writes:

> On Sunday 06 Nov 2011 08:48:45 Graham Murray wrote:
>> For the last day or so, every time I try to access b.g.o I get an OCSP
>> error "(Error code: sec_error_ocsp_bad_http_response)" in firefox. I
>> have seen this error before but it is normally transient and only lasts
>> a few minutes.
>> 
>> Are others seeing this or is it a problem at my end? Other https sites
>> load with no problem.
>
> What is the setting of:
>
>   security.OCSP.disable_button.managecrl
>
> when you type about:config and enter OCSP in the search field?

It is set to 'false'. All the other options containing OCSP are set to
'true'

Re: [gentoo-user] Unable to access bugs.gentoo.org

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 946 bytes --]

On Sunday 06 Nov 2011 11:17:16 Graham Murray wrote:
> Mick <michaelkintzios@gmail.com> writes:
> > On Sunday 06 Nov 2011 08:48:45 Graham Murray wrote:
> >> For the last day or so, every time I try to access b.g.o I get an OCSP
> >> error "(Error code: sec_error_ocsp_bad_http_response)" in firefox. I
> >> have seen this error before but it is normally transient and only lasts
> >> a few minutes.
> >> 
> >> Are others seeing this or is it a problem at my end? Other https sites
> >> load with no problem.
> > 
> > What is the setting of:
> >   security.OCSP.disable_button.managecrl
> > 
> > when you type about:config and enter OCSP in the search field?
> 
> It is set to 'false'. All the other options containing OCSP are set to
> 'true'

What are these?

Under 'Edit/Preferences/Advanced/Validation' have you unticked the "When an 
OCSP server connection fails, treat the certificate as invalid"?
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-user] Unable to access bugs.gentoo.org

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 1214 bytes --]

On Sunday 06 Nov 2011 11:35:47 Mick wrote:
> On Sunday 06 Nov 2011 11:17:16 Graham Murray wrote:
> > Mick <michaelkintzios@gmail.com> writes:
> > > On Sunday 06 Nov 2011 08:48:45 Graham Murray wrote:
> > >> For the last day or so, every time I try to access b.g.o I get an OCSP
> > >> error "(Error code: sec_error_ocsp_bad_http_response)" in firefox. I
> > >> have seen this error before but it is normally transient and only
> > >> lasts a few minutes.
> > >> 
> > >> Are others seeing this or is it a problem at my end? Other https sites
> > >> load with no problem.
> > > 
> > > What is the setting of:
> > >   security.OCSP.disable_button.managecrl
> > > 
> > > when you type about:config and enter OCSP in the search field?
> > 
> > It is set to 'false'. All the other options containing OCSP are set to
> > 'true'
> 
> What are these?
> 
> Under 'Edit/Preferences/Advanced/Validation' have you unticked the "When an
> OCSP server connection fails, treat the certificate as invalid"?

Also, I forgot to say, under Preferences/Advanced/View Certificates, can you 
delete any expired bugs.gentoo.org certificates, that you may have accumulated 
over the years.
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]