This site's OCSP certificate is invalid Topic is solved
Moderators: FranklinDM, Lootyhoof
This site's OCSP certificate is invalid
A screenshot (in German) has been attached; this had appeared on accessing this forum. To access this site and report this, I had needed disable OCSP in the advanced settings. This error had appeared only today; all had worked as it ought to have yesterday.
Browser: Pale Moon (Pusser’s repository for Debian)
Operating System: Linux Mint Debian Edition 4 (amd64)
※Receiving Debian 10 LTS security upgrades
Hardware: HP Pavilion DV6-7010 (1400 MHz, 6 GB)
Formerly user TheRealMaestro: æsc is the best letter.
Operating System: Linux Mint Debian Edition 4 (amd64)
※Receiving Debian 10 LTS security upgrades
Hardware: HP Pavilion DV6-7010 (1400 MHz, 6 GB)
Formerly user TheRealMaestro: æsc is the best letter.
Re: This site's OCSP certificate is invalid
Are you forcing OCSP verification and treating OCSP failures as errors? You shouldn't.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Re: This site's OCSP certificate is invalid
Yes, I use ordinarily the settings shown in the screenshot. To access this site, I had unticked both boxes. What is the purpose and intended use for these options?
(Curiously, the site appears now to work as normal, with these boxes ticked again. It would seem the error was momentary, so I see this question, unless the site lapses, as informative only.)
(Curiously, the site appears now to work as normal, with these boxes ticked again. It would seem the error was momentary, so I see this question, unless the site lapses, as informative only.)
Browser: Pale Moon (Pusser’s repository for Debian)
Operating System: Linux Mint Debian Edition 4 (amd64)
※Receiving Debian 10 LTS security upgrades
Hardware: HP Pavilion DV6-7010 (1400 MHz, 6 GB)
Formerly user TheRealMaestro: æsc is the best letter.
Operating System: Linux Mint Debian Edition 4 (amd64)
※Receiving Debian 10 LTS security upgrades
Hardware: HP Pavilion DV6-7010 (1400 MHz, 6 GB)
Formerly user TheRealMaestro: æsc is the best letter.
Re: This site's OCSP certificate is invalid
The second of the options is not recommended (and not the default in Pale Moon!). OCSP servers aren't always reliably available and it will fall back to standard certificate checks in that case.
You should not treat an OCSP failure as an invalid certificate unless you have explicit need for requiring revocation information to be checked and verified every time you access the server (some high sec environments do require this but as an end user you shouldn't need this).
You should not treat an OCSP failure as an invalid certificate unless you have explicit need for requiring revocation information to be checked and verified every time you access the server (some high sec environments do require this but as an end user you shouldn't need this).
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite