Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

Learn More

(Error code: sec_error_ocsp_unknown_cert)

  • 5 réponses
  • 130 ont ce problème
  • 151 vues
  • Dernière réponse par freddyb

more options

Normally when getting certificate error you can always allow it but this time i'm not getting the extra options to allow it ... And manually allowing or creating a certificate in firefox is not working either...

Its a known website of mine and its perfectly safe.

Normally when getting certificate error you can always allow it but this time i'm not getting the extra options to allow it ... And manually allowing or creating a certificate in firefox is not working either... Its a known website of mine and its perfectly safe.

Solution choisie

Toutes les réponses (5)

more options

Solution choisie

FIXED.

more options

I have the same problem. I got this error when I created a new SSL certificate for my personal website. It works fine in other browers, but not in Firefox.

I am wondering how you fixed this.

more options

Hi planck01

Could you please start a new thread instead of posting in an existing thread?


What kind of error do you get?

Make sure that you send all required intermediate certificates. Otherwise it only works if Firefox has stored the intermediate certificate from a previous visit to a web server that has send it.

You can check the OCSP setting:

  • Tools > Options > Advanced > Encryption: Certificates > Validation:
[X] "Use the Online Certificate Status Protocol (OCSP) to confirm the current validity of certificates" (security.OCSP.enabled)
[ ] "When an OCSP server connection fails, treat the certificate as invalid" (security.OCSP.require)
more options

I disabled OCSP :p

In mozilla advanced tab and certificates.

more options

I had the same error and the CA which generated my certificate was just too slow to handle their part quick enough. The solution is, sadly, to wait for a few hours and then switch over to the new certificate. Other CAs might be faster, but this is probably the price I paid for choosing the one that gives out certs for free :)