Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

On any google website I keep getting SEC_ERROR_OCSP_SERVER_ERROR

  • 4 replies
  • 1 has this problem
  • 9 views
  • Last reply by cor-el

Pathex
Pathex
more options

This seems to have started today. On sites like Youtube, Google.com or Gmail I keep getting that SEC_ERROR_OCSP_SERVER_ERROR message. I tried rebooting but it still happens.

Those same sites seem to work fine in Chrome.

This seems to have started today. On sites like Youtube, Google.com or Gmail I keep getting that SEC_ERROR_OCSP_SERVER_ERROR message. I tried rebooting but it still happens. Those same sites seem to work fine in Chrome.

All Replies (4)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

I don't think Chrome checks revocations using the designated OCSP servers. Instead, Google maintains a CRL (certificate revocation list).

Anyway, the server has some kind of issue over the past 24 hours. You could try this:

(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful or accepting the risk.

(2) In the search box above the list, type or paste ocsp and pause while the list is filtered

(3) If the security.OCSP.require preference is bolded and "modified" or "user set" to true, double-click it to restore the default value of false

You may need to reload your Google page bypassing the cache, using either:

  • Shift+click the reload button
  • Ctrl+Shift+r (on Mac Command+Shift+r)

To clarify, this does not completely disable checking whether a certificate is revoked. There are two different preferences:

  • security.OCSP.enabled = 1 (default setting) requires Firefox to check the cert with the OCSP server to make sure it hasn't been revoked
  • security.ocsp.require determines what happens if the OCSP server does not respond
    • false (default setting) treats the cert as not revoked and you can connect normally
    • true treats the cert as revoked and prevents you from connecting

I suppose your choice about "require" depends on how often you expect to encounter a server with a revoked certificate and a nonresponsive OCSP server. I think the risk is low, but then, I may not be as adventurous in my browsing as you are.

Pathex
Pathex Question owner
more options

Okay sounds good. Thanks for the info.

WestEnd
WestEnd
more options

Pathex said

This seems to have started today. On sites like Youtube, Google.com or Gmail I keep getting that SEC_ERROR_OCSP_SERVER_ERROR message. I tried rebooting but it still happens. Those same sites seem to work fine in Chrome.

This would mean something is not connecting between your computer and the sites and as it is happening in Chrome. This would indicate to me a A/V or firewall problem.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Note that is looks that Google has fixed their servers.

If anyone still gets errors then try to reload and bypass the cache.

You can reload web page(s) and bypass the cache to refresh possibly outdated or corrupted files.

  • hold down the Shift key and left-click the Reload button
  • press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
  • press "Command + Shift + R" (Mac)