View Issue Details

IDProjectCategoryView StatusLast Update
0001479Main CAcert Websiteweb of trustpublic2020-05-12 07:01
Reporteralkas Assigned Toegal  
PriorityhighSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Summary0001479: On Palemoon, Seagate, and Firefox browsers page https://www.cacert.org fails
DescriptionBrowsers mentioned report the following error:
SEC_ERROR_OCSP_OLD_RESPONSE
immediately after trying to visit that page.
Steps To ReproduceUsing one of the browsers mentioned, visit the page https://www.cacert.org .
Tagsinaccessible www.cacert.org
Reviewed by
Test InstructionsUsing one of the browsers mentioned, visit the page https://www.cacert.org .

Relationships

parent of 0001478 closedegal not issuing new certificates 

Activities

jandd

2020-03-23 09:29

administrator   ~0005870

A workaround is to disable ocsp stapling in about:config but this is not a good idea because it disables OCSP checks for other sites too. The main issue is that the signer is down (see 0001478) and therefore the OCSP responder has no current information.

egal

2020-05-12 07:01

administrator   ~0005880

Signer hard hardware-issue, was replaced

Due to the hardware-issue it was not possible to create certificates, OCSP and CRLs ...

Issue History

Date Modified Username Field Change
2020-03-23 07:52 alkas New Issue
2020-03-23 07:52 alkas Tag Attached: inaccessible www.cacert.org
2020-03-23 09:26 jandd Relationship added parent of 0001478
2020-03-23 09:29 jandd Note Added: 0005870
2020-03-23 09:29 jandd Note View State: 0005870: public
2020-05-12 07:01 egal Assigned To => egal
2020-05-12 07:01 egal Status new => closed
2020-05-12 07:01 egal Resolution open => fixed
2020-05-12 07:01 egal Note Added: 0005880