Pesquisar no apoio

Evite burlas no apoio. Nunca iremos solicitar que telefone ou envie uma mensagem de texto para um número de telefone ou que partilhe informações pessoais. Por favor, reporte atividades suspeitas utilizando a opção "Reportar abuso".

Saber mais

(Error code: sec_error_ocsp_unknown_cert)

  • 5 respostas
  • 130 têm este problema
  • 193 visualizações
  • Última resposta por freddyb

more options

Normally when getting certificate error you can always allow it but this time i'm not getting the extra options to allow it ... And manually allowing or creating a certificate in firefox is not working either...

Its a known website of mine and its perfectly safe.

Normally when getting certificate error you can always allow it but this time i'm not getting the extra options to allow it ... And manually allowing or creating a certificate in firefox is not working either... Its a known website of mine and its perfectly safe.

Solução escolhida

Todas as respostas (5)

more options

Solução escolhida

FIXED.

more options

I have the same problem. I got this error when I created a new SSL certificate for my personal website. It works fine in other browers, but not in Firefox.

I am wondering how you fixed this.

more options

Hi planck01

Could you please start a new thread instead of posting in an existing thread?


What kind of error do you get?

Make sure that you send all required intermediate certificates. Otherwise it only works if Firefox has stored the intermediate certificate from a previous visit to a web server that has send it.

You can check the OCSP setting:

  • Tools > Options > Advanced > Encryption: Certificates > Validation:
[X] "Use the Online Certificate Status Protocol (OCSP) to confirm the current validity of certificates" (security.OCSP.enabled)
[ ] "When an OCSP server connection fails, treat the certificate as invalid" (security.OCSP.require)
more options

I disabled OCSP :p

In mozilla advanced tab and certificates.

more options

I had the same error and the CA which generated my certificate was just too slow to handle their part quick enough. The solution is, sadly, to wait for a few hours and then switch over to the new certificate. Other CAs might be faster, but this is probably the price I paid for choosing the one that gives out certs for free :)