Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Error code: SEC_ERROR_OCSP_MALFORMED_RESPONSE

  • 2 个回答
  • 1 人有此问题
  • 3 次查看
  • 最后回复者为 cor-el

dennis.roehrich
dennis.roehrich
more options

Firefox version 113.0.2 on Windows 10 Displayed: Error code: SEC_ERROR_OCSP_MALFORMED_RESPONSE

Website loads fine in Chrome and Edge. Certificate verified as valid. Website hosted on SquareSpace. This is a known issue with Firefox as there are many reports with Firefox falsely reporting this error with websites hosted on SquareSpace. Occasionally happens with major sites such as google.com.

      • Verified Firefox issue as there are many reports of this issue.

Cache and all site data cleared. No Proxy set. Endpoint protection security software disabled.

As this is a known Mozilla Firefox issue this needs to get fixed now!

Firefox version 113.0.2 on Windows 10 Displayed: Error code: SEC_ERROR_OCSP_MALFORMED_RESPONSE Website loads fine in Chrome and Edge. Certificate verified as valid. Website hosted on SquareSpace. This is a known issue with Firefox as there are many reports with Firefox falsely reporting this error with websites hosted on SquareSpace. Occasionally happens with major sites such as google.com. ***Verified Firefox issue as there are many reports of this issue. Cache and all site data cleared. No Proxy set. Endpoint protection security software disabled. As this is a known Mozilla Firefox issue this needs to get fixed now!

所有回复 (2)

dennis.roehrich
dennis.roehrich 提问者
more options

Additional update Disablling OCSP Stapling in about:config -> security.ssl.enable_ocsp_stapling = false allows website to load to verify the Certificate is valid in Firefox showing it is a Firefox issue.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

OCSP is a security feature and if the website supports OCSP Stapling then Firefox always checks whether the OCSP response that is stapled on the server is valid unlike other browsers that aren't that strict and are more forgiving when there is an issue. A server needs to make sure that the OCSP response is valid.

See: