sec_error_ocsp_try_server_later error -Firefox

Discussion in 'Help and Feedback' started by Aushiker, Nov 4, 2015.

  1. Aushiker

    Aushiker Mu-43 Hall of Famer

    Sep 12, 2014
    Fremantle, Western Australia
    Andrew
    Hi

    As of this evening I have suddenly started getting an sec_error_ocsp_try_server_later error message which has the effect of blocking access to the forums when using Firefox 42.0 [Mac]. It seems I can access the forums okay using Chrome because it currently does not check the the OCSP status or something along those lines.

    I have turned off "Query OCSP responder servers to confirm the current validity of certificates" and cleared the cache/cookies etc to no avail.

    Screenshot 2015-11-04 20.05.55.

    Does anyone have any suggestions on a fix?

    Thanks
    Andrew
     
    • Informative Informative x 1
  2. Aushiker

    Aushiker Mu-43 Hall of Famer

    Sep 12, 2014
    Fremantle, Western Australia
    Andrew
    Okay I have found a work around which maybe of use to others if you encounter the same problem. The workaround is to go to about:config, search for the line "security.ssl.enable_ocsp_stapling" and click on it so it switches from true to false.

    Not sure this is the best solution as it seems the issue may have something to do with the security certificates, but at least for me it is back working now.

    Andrew
     
    • Informative Informative x 1
  3. Wisertime

    Wisertime Mu-43 All-Pro

    Aug 6, 2013
    Philly
    Steve
    Thanks for this. I'm having the same issue. Where do I get to about:config? I don't see anything on help/about...so you mean something else? Firefox has been flakey lately.
     
  4. Amin Sabet

    Amin Sabet Administrator

    Apr 10, 2009
    Boston, MA (USA)
    Asking my server admin to look into this. Thanks.
     
  5. Aushiker

    Aushiker Mu-43 Hall of Famer

    Sep 12, 2014
    Fremantle, Western Australia
    Andrew
    Type it in your Firefox address bar/box thingo.

    Andrew
     
  6. MattW

    MattW Server Admin

    14
    Mar 7, 2015
    Sheffield
    Matt
    Taking a look now.
     
  7. Wisertime

    Wisertime Mu-43 All-Pro

    Aug 6, 2013
    Philly
    Steve
    Back online now
     
    • Like Like x 1
  8. MattW

    MattW Server Admin

    14
    Mar 7, 2015
    Sheffield
    Matt
    OK, should be fixed. Not sure what the actual cause is, but I've re-installed the SSL certificate on the domain, restarted Apache, and it's loading again now in Firefox 42.
     
    • Appreciate Appreciate x 2
  9. MattW

    MattW Server Admin

    14
    Mar 7, 2015
    Sheffield
    Matt
  10. Aushiker

    Aushiker Mu-43 Hall of Famer

    Sep 12, 2014
    Fremantle, Western Australia
    Andrew
    Thanks. Seems to be fixed from my end.

    Andrew
     
    • Like Like x 1
  11. Amin Sabet

    Amin Sabet Administrator

    Apr 10, 2009
    Boston, MA (USA)
    • Like Like x 1
  12. barry13

    barry13 Super Moderator; Photon Wrangler

    Mar 7, 2014
    Southern California
    Barry
    FYIs, the OCSP servers are run by the certificate issuers... Sounds like their servers were overloaded or down.

    Barry
     
    • Appreciate Appreciate x 1