Re: OCSP error in icecat

[ludo@gnu.org (Ludovic Courtès)]

Andreas Enge <andreas@enge.fr> skribis:

> On Wed, Apr 09, 2014 at 10:29:24PM +0200, Ludovic Courtès wrote:
>> Perhaps it’d be best to bring it on bug-gnuzilla@gnu.org?
>
> I started writing a bug report, but decided against sending it; I think the
> problem is with the web server (the certificate of which has expired, by the
> way).
>
>> Andreas Enge <andreas@enge.fr> skribis:
>> > The following site explains how to turn off OCSP verification:
>> >    http://www.ghacks.net/2013/10/02/fix-ocsp-server-refused-request-unauthorized-firefox/
>
> Well, "turn off" was too strongly worded here: When one unchecks
>   Edit -> Preferences -> Advanced -> Certificates -> Validation
>   -> "When an OCSP server connection fails, treat the certificate as invalid",
> then the checks still work if the server replies. I think this is a reasonable
> solution, but each user has to apply it individually.

So in the end, is there a real problem, or did it just have to do with a
specific web server?

Ludo’.