Page MenuHomePhabricator

Invalid OCSP signing certificate in OCSP response : can't read Wikimedia websites on Firefox
Closed, ResolvedPublic

Description

I'm not able to read any Wikimedia website on Firefox (no problem with Chromium).
Error message : Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert).

WereSpielChequers has raised this bug too, and reported it on wikimania-l.

Event Timeline

Trizek-WMF raised the priority of this task from to Unbreak Now!.
Trizek-WMF updated the task description. (Show Details)
Trizek-WMF subscribed.
Trizek-WMF renamed this task from Invalid OCSP signing certificate in OCSP response : can't read Wikipedia on Firefox on Firefox to Invalid OCSP signing certificate in OCSP response : can't read Wikimedia websites on Firefox.Aug 20 2015, 3:05 PM
Trizek-WMF set Security to None.

Indeed. Must have fluffed itself up during the past 5 or 10 minutes. Interestingly I disabled OCSP-certificate checks in my browser and still had this issue.

I can confirm that I also had this problem with the Firefox security option "Query OCSP responder servers to confirm the current validity of certificates" enabled (by default). After about a half hour it stopped happening. It now appears that all is well.

BBlack claimed this task.
BBlack subscribed.

We should be back to 100% ok on this issue from the user POV. Mostly-ok was about 15:10 UTC, with some intermittent issues until 16:42. Incident report here: https://wikitech.wikimedia.org/wiki/Incident_documentation/20150820-OCSP