Page 1 of 1

Forum OCSP error

Posted: Thu Sep 11, 2014 5:15 am
by domob
Since a few days, I always get an OCSP error reported by Iceweasel (Firefox) when accessing the forum. I've strict checks turned on, and occasionally I get these errors also for other sites (presumably when their CA's OCSP server is down) - but with the Namecoin forum, it seems to be more like a "permanent" problem now. Anyone knows what's the problem here?

Re: Forum OCSP error

Posted: Thu Sep 11, 2014 7:38 am
by phelix
Things work ok for me...

Re: Forum OCSP error

Posted: Fri Sep 12, 2014 6:03 am
by domob
phelix wrote:Things work ok for me...
Do you have strict checks turned on? ("When an OCSP connection fails, treat the certificate as invalid.") However, it may also be related to my own system somehow ... I sometimes get these for other sites as well. It just started to be every time I access the forum now.

Re: Forum OCSP error

Posted: Fri Sep 12, 2014 9:24 am
by phelix
domob wrote:
phelix wrote:Things work ok for me...
Do you have strict checks turned on? ("When an OCSP connection fails, treat the certificate as invalid.") However, it may also be related to my own system somehow ... I sometimes get these for other sites as well. It just started to be every time I access the forum now.
I activated that option and restarted Firefox but it still works normally. However, I could not find explicit information about whether the OCSP verification was successful.

I removed namecoin.info from some allowed list and now https://namecoin.info fails with 404.

https://www.namecoin.info fails "untrusted", then 404 on overwrite.

Something is wrong, sigh.

edit: Does OCSP mean that every time I visit a website with SSL some authoritah is being notified?

Re: Forum OCSP error

Posted: Sat Sep 13, 2014 6:30 am
by domob
phelix wrote:edit: Does OCSP mean that every time I visit a website with SSL some authoritah is being notified?
I think so. (In my case, however, it is at least via Tor.) I'm not really sure whether I should use OCSP or not, but so far I've enabled it since that seems to be what also the EFF and others suggested (and I use Tor to protect me from tracking, at least a bit).

Re: Forum OCSP error

Posted: Wed Oct 15, 2014 6:52 am
by mightbemike
Works ok for me. I did not try FireFox, but with Tor w/ with strict OCSP setting, no warning from browser at all.