X
Tap here to go to the mobile version of the site.

منتدى الدعم

Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)

Posted

I first saw this error last night first with tumblr and then tried to go to the mozilla support site to see what the problem is but got the same error. So then with the help of Google, I discovered going into the "about:config" and setting the "security.ssl.enable_ocsp_stapling" to FALSE to work as a temporary fix for my problem and things began to work fine.

Today, I set "security.ssl.enable_ocsp_stapling" back to TRUE but still got the same "Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)" message when opening tumblr and mozilla support.

The solution for most people seemed to be to give it time but I wonder if I'm having a different problem to others since sites like twitter and droxbox appeared broken when I tried opening them. But when "security.ssl.enable_ocsp_stapling" was set to FALSE, they seem to work fine.

I first saw this error last night first with tumblr and then tried to go to the mozilla support site to see what the problem is but got the same error. So then with the help of Google, I discovered going into the "about:config" and setting the "security.ssl.enable_ocsp_stapling" to FALSE to work as a temporary fix for my problem and things began to work fine. Today, I set "security.ssl.enable_ocsp_stapling" back to TRUE but still got the same "Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)" message when opening tumblr and mozilla support. The solution for most people seemed to be to give it time but I wonder if I'm having a different problem to others since sites like twitter and droxbox appeared broken when I tried opening them. But when "security.ssl.enable_ocsp_stapling" was set to FALSE, they seem to work fine.

Chosen solution

An incorrect system clock on your computer can cause OCSP issues.

You can check the date and time and time zone in the clock on your computer: (double) click the clock icon on the Windows Taskbar.

You can inspect the certificate chain via a site like this:

Read this answer in context 8

Additional System Details

Installed Plug-ins

  • Version 5.38.5.0
  • Google Update
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Adobe PDF Plug-In For Firefox and Netscape 10.1.11
  • iTunes Detector Plug-in
  • Shockwave Flash 11.7 r700
  • Next Generation Java Plug-in 10.15.2 for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • 4.1.10329.0
  • Windows Presentation Foundation (WPF) plug-in for Mozilla browsers
  • DRM Netscape Network Object
  • Npdsplay dll
  • DRM Store Netscape Plugin

Application

  • Firefox 33.0.2
  • User Agent: Mozilla/5.0 (Windows NT 5.1; rv:33.0) Gecko/20100101 Firefox/33.0
  • Support URL: https://support.mozilla.org/1/firefox/33.0.2/WINNT/en-US/

Extensions

  • Classic Theme Restorer 1.2.5 (ClassicThemeRestorer@ArisT2Noia4dev)
  • DownloadHelper 4.9.24 ({b9db16a4-6edc-47ec-a1f4-b86292ed211d})
  • FoxyProxy Standard 4.4.1 (foxyproxy@eric.h.jung)
  • Grab and Drag 3.2.5.2 ({477c4c36-24eb-11da-94d4-00e08161165f})
  • Troubleshooter 1.1a (troubleshooter@mozilla.org)
  • ClipConverter 1.3.2 (clipconverter@clipconverter.cc) (Inactive)
  • Microsoft .NET Framework Assistant 0.0.0 ({20a82645-c095-46ed-80e3-08825760534b}) (Inactive)
  • The Addon Bar (restored) 3.2 (the-addon-bar@GeekInTraining-GiT) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) Graphics Media Accelerator 500
  • adapterDescription2:
  • adapterDeviceID: 0x8108
  • adapterDeviceID2:
  • adapterDrivers: igxprd32
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • direct2DEnabled: False
  • direct2DEnabledMessage: [u'tryNewerDriver', u'6.14.11.1018']
  • directWriteEnabled: False
  • directWriteVersion: 0.0.0.0
  • driverDate: 4-28-2009
  • driverDate2:
  • driverVersion: 6.14.11.1009
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'skia', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'cairo', u'AzureSkiaAccelerated': 0}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) Graphics Media Accelerator 500 Direct3D9 vs_3_0 ps_3_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 9

Modified Preferences

  • accessibility.typeaheadfind.flashBar: 0
  • browser.cache.disk.capacity: 104448
  • browser.cache.disk.smart_size.enabled: False
  • browser.cache.disk.smart_size.first_run: False
  • browser.cache.disk.smart_size.use_old_max: False
  • browser.cache.disk.smart_size_cached_value: 266240
  • browser.cache.frecency_experiment: 3
  • browser.places.smartBookmarksVersion: 7
  • browser.sessionstore.restore_on_demand: False
  • browser.sessionstore.upgradeBackup.latestBuildID: 20141027150301
  • browser.startup.homepage_override.buildID: 20141027150301
  • browser.startup.homepage_override.mstone: 33.0.2
  • browser.tabs.drawInTitlebar: False
  • browser.tabs.onTop: False
  • dom.mozApps.used: True
  • dom.w3c_touch_events.expose: False
  • extensions.lastAppVersion: 33.0.2
  • font.internaluseonly.changed: False
  • gfx.blacklist.suggested-driver-version: 6.14.11.1018
  • media.gmp-gmpopenh264.lastUpdate: 1416005858
  • media.gmp-gmpopenh264.version: 1.1
  • media.gmp-manager.lastCheck: 1416005857
  • network.cookie.cookieBehavior: 0
  • network.cookie.prefsMigrated: True
  • places.database.lastMaintenance: 1415968297
  • places.history.expiration.transient_current_max_pages: 24474
  • places.history.expiration.transient_optimal_database_size: 43062558
  • plugin.disable_full_page_plugin_for_types: application/pdf
  • plugin.importedState: True
  • privacy.clearOnShutdown.cookies: False
  • privacy.cpd.downloads: False
  • privacy.cpd.history: False
  • privacy.cpd.sessions: False
  • privacy.sanitize.migrateFx3Prefs: True
  • security.disable_button.openCertManager: False
  • security.disable_button.openDeviceManager: False
  • security.ssl.enable_ocsp_stapling: False
  • security.warn_submit_insecure: False
  • security.warn_submit_insecure.show_once: False
  • security.warn_viewing_mixed: False
  • security.warn_viewing_mixed.show_once: False
  • storage.vacuum.last.index: 1
  • storage.vacuum.last.places.sqlite: 1414655021

Misc

  • User JS: Yes
  • Accessibility: No
cor-el
  • Top 10 Contributor
  • Moderator
17567 solutions 158879 answers

Chosen Solution

An incorrect system clock on your computer can cause OCSP issues.

You can check the date and time and time zone in the clock on your computer: (double) click the clock icon on the Windows Taskbar.

You can inspect the certificate chain via a site like this:

An incorrect system clock on your computer can cause OCSP issues. You can check the date and time and time zone in the clock on your computer: (double) click the clock icon on the Windows Taskbar. *https://support.mozilla.org/kb/Secure+Connection+Failed You can inspect the certificate chain via a site like this: *http://www.networking4all.com/en/support/tools/site+check/

Question owner

Ah, thank you very much for that. Setting the correct date and time solved everything.

Ah, thank you very much for that. Setting the correct date and time solved everything.