Windows 10 will reach EOS (end of support) on October 14, 2025. For more information, see this article.

Avatar for Username

Kërkoni te Asistenca

Shmangni karremëzime gjoja asistence. S’do t’ju kërkojmë kurrë të bëni një thirrje apo të dërgoni tekst te një numër telefoni, apo të na jepni të dhëna personale. Ju lutemi, raportoni veprimtari të dyshimtë duke përdorur mundësinë “Raportoni Abuzim”.

Mësoni Më Tepër

Kjo rrjedhë është arkivuar. Ju lutemi, bëni një pyetje të re, nëse keni nevojë për ndihmë.

FF blocks one of my sites for faulty OCSP response but not other nearly identical site

  • 4 përgjigje
  • 1 e ka hasur këtë problem
  • 165 parje
  • Përgjigjja më e re nga deOldphart

deOldphart
deOldphart
more options

I have two very similar websites built with Concrete5 CMS and with with Let's Encrypt SSL installed. WIthin the last week or so, one site began throwing the following error, "The OCSP response does not include a status for the certificate being verified." and not loading. The SSL certificate checks out fine (Grade A with Qualys SSL test as recommended by FF support page), and it does not happen with Safari or Chrome. It happens with FF 58 and 59 on several machines. It does not happen at all with my other web site. My hosting service says these sites are hosted on the same hardware and share the same Let's Encrypt installation. They think it is a FF issue.

I am stumped. Any help would be appreciated. Thanks.

Problem site: https://traditionalbamptonmorris.org.uk Okay similar site: http://charlburymorris.org.uk

I have two very similar websites built with Concrete5 CMS and with with Let's Encrypt SSL installed. WIthin the last week or so, one site began throwing the following error, "The OCSP response does not include a status for the certificate being verified." and not loading. The SSL certificate checks out fine (Grade A with Qualys SSL test as recommended by FF support page), and it does not happen with Safari or Chrome. It happens with FF 58 and 59 on several machines. It does not happen at all with my other web site. My hosting service says these sites are hosted on the same hardware and share the same Let's Encrypt installation. They think it is a FF issue. I am stumped. Any help would be appreciated. Thanks. Problem site: https://traditionalbamptonmorris.org.uk Okay similar site: http://charlburymorris.org.uk

Zgjidhje e zgjedhur

OCSP response:

So you need to check the server of the first URL.

Lexojeni këtë përgjigje brenda kontekstit 👍 2

Krejt Përgjigjet (4)

cor-el
cor-el
  • Moderator
more options

Zgjidhja e Zgjedhur

OCSP response:

So you need to check the server of the first URL.

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

If you haven't heard of OCSP Stapling before, it's when your server sends not only its certificate, and any intermediate certificates necessary to complete a chain of trust to a built-in certificate, but also an OCSP response showing the certificate has not been revoked. Then Firefox won't need to separately contact the certificate issuer's OCSP service.

cor-el
cor-el
  • Moderator
more options

See also:

deOldphart
deOldphart I zoti i pyetjes
more options

Thanks, cor-el. I passed that on to my ISP who quickly responded that they have put a temporary fix in place while they "investigate with LiteSpeed why servers running their web server are having an intermittent issue with OCSP stapling."

That SSL test site is very useful, but obviously it helps to know what to look for. Thanks again.

Ndryshuar nga deOldphart