Forum OCSP error

Post Reply
domob
Posts: 1095
Joined: Mon Jun 24, 2013 11:27 am
Contact:

Forum OCSP error

Post by domob » Thu Sep 11, 2014 5:15 am

Since a few days, I always get an OCSP error reported by Iceweasel (Firefox) when accessing the forum. I've strict checks turned on, and occasionally I get these errors also for other sites (presumably when their CA's OCSP server is down) - but with the Namecoin forum, it seems to be more like a "permanent" problem now. Anyone knows what's the problem here?
BTC: 1domobKsPZ5cWk2kXssD8p8ES1qffGUCm | NMC: NCdomobcmcmVdxC5yxMitojQ4tvAtv99pY
BM-GtQnWM3vcdorfqpKXsmfHQ4rVYPG5pKS
Use your Namecoin identity as OpenID: https://nameid.org/

phelix
Posts: 1631
Joined: Thu Aug 18, 2011 6:59 am

Re: Forum OCSP error

Post by phelix » Thu Sep 11, 2014 7:38 am

Things work ok for me...
nx.bit - some namecoin stats
nf.bit - shortcut to this forum

domob
Posts: 1095
Joined: Mon Jun 24, 2013 11:27 am
Contact:

Re: Forum OCSP error

Post by domob » Fri Sep 12, 2014 6:03 am

phelix wrote:Things work ok for me...
Do you have strict checks turned on? ("When an OCSP connection fails, treat the certificate as invalid.") However, it may also be related to my own system somehow ... I sometimes get these for other sites as well. It just started to be every time I access the forum now.
BTC: 1domobKsPZ5cWk2kXssD8p8ES1qffGUCm | NMC: NCdomobcmcmVdxC5yxMitojQ4tvAtv99pY
BM-GtQnWM3vcdorfqpKXsmfHQ4rVYPG5pKS
Use your Namecoin identity as OpenID: https://nameid.org/

phelix
Posts: 1631
Joined: Thu Aug 18, 2011 6:59 am

Re: Forum OCSP error

Post by phelix » Fri Sep 12, 2014 9:24 am

domob wrote:
phelix wrote:Things work ok for me...
Do you have strict checks turned on? ("When an OCSP connection fails, treat the certificate as invalid.") However, it may also be related to my own system somehow ... I sometimes get these for other sites as well. It just started to be every time I access the forum now.
I activated that option and restarted Firefox but it still works normally. However, I could not find explicit information about whether the OCSP verification was successful.

I removed namecoin.info from some allowed list and now https://namecoin.info fails with 404.

https://www.namecoin.info fails "untrusted", then 404 on overwrite.

Something is wrong, sigh.

edit: Does OCSP mean that every time I visit a website with SSL some authoritah is being notified?
nx.bit - some namecoin stats
nf.bit - shortcut to this forum

domob
Posts: 1095
Joined: Mon Jun 24, 2013 11:27 am
Contact:

Re: Forum OCSP error

Post by domob » Sat Sep 13, 2014 6:30 am

phelix wrote:edit: Does OCSP mean that every time I visit a website with SSL some authoritah is being notified?
I think so. (In my case, however, it is at least via Tor.) I'm not really sure whether I should use OCSP or not, but so far I've enabled it since that seems to be what also the EFF and others suggested (and I use Tor to protect me from tracking, at least a bit).
BTC: 1domobKsPZ5cWk2kXssD8p8ES1qffGUCm | NMC: NCdomobcmcmVdxC5yxMitojQ4tvAtv99pY
BM-GtQnWM3vcdorfqpKXsmfHQ4rVYPG5pKS
Use your Namecoin identity as OpenID: https://nameid.org/

mightbemike
Posts: 57
Joined: Fri Apr 25, 2014 4:40 am

Re: Forum OCSP error

Post by mightbemike » Wed Oct 15, 2014 6:52 am

Works ok for me. I did not try FireFox, but with Tor w/ with strict OCSP setting, no warning from browser at all.
NMC: NFhmGAqzRpZbGs3uCPPo7DJKuscuL4Aap2
id/mightbemike

Post Reply