https://docs.microsoft.com = Error code: MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING

[Ant]

Hello.

My SeaMonkey v2.53.10.1 web browsers are unable to view
https://docs.microsoft.com due to this error:

"Secure Connection Failed

An error occurred during a connection to docs.microsoft.com.

The OCSP response does not include a status for the certificate being
verified.

Error code: MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING

The page you are trying to view cannot be shown because the authenticity
of the received data could not be verified.

Please contact the website owners to inform them of this problem."


I see this in all of the computers with their OSes (Windows 10 Pro.,
Debian Jessie v8, and macOS Mojave v10.14.6). Faking user agents didn't
help. I had to use Firefox v95 to view this web site. Is this something
Microsoft has to fix for SeaMonkeyers? :(

Thank you for reading and hopefully answering soon. :)
--
Cold & windy winter rain storm is here! Also, 2 many free weekend games
& software upgrades again! Dang strikes. :(
Note: A fixed width font (Courier, Monospace, etc.) is required to see
this signature correctly.
/\___/\ http://aqfl.net & http://antfarm.home.dhs.org
/ /\ /\ \
| |o o| | Axe ANT from its address if shown & e-mailing privately.
\ _ / Please kindly use Ant nickname & URL/link if crediting.
( )

[Steve Wendt]

On 12/14/2021 11:25 AM, Ant wrote:

> The OCSP response does not include a status for the certificate being
> verified.
>
> Error code: MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING

Preferences -> Privacy & Security -> Certificates
Uncheck the bottom option: "When an OCSP server connection fails, treat
the certificate as invalid"

Then you'll get treated to an invitation to download Edge. :-p

[Ant]

Ha, no thanks. I'll keep using the security defaults then! :-b

[Ray_Net]

Ant wrote on 14-12-21 23:16:

> On 12/14/2021 11:55 AM, Steve Wendt wrote:
>> On 12/14/2021 11:25 AM, Ant wrote:
>>
>>> The OCSP response does not include a status for the certificate
>>> being verified.
>>>
>>> Error code: MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
>>
>> Preferences -> Privacy & Security -> Certificates
>> Uncheck the bottom option: "When an OCSP server connection fails,
>> treat the certificate as invalid"
>>
>> Then you'll get treated to an invitation to download Edge.  :-p
>
> Ha, no thanks. I'll keep using the security defaults then! :-b

You may uncheck the option "When an OCSP server connection fails, treat
the certificate as invalid"
Because the invitation to use Edge, is just an invitation that let you
go on this site and find the documentaion you want.

[Dirk Fieldhouse]

OK, now I can reproduce the error.

The setting is security.OCSP.require, default false, but the error
occurs when it's enabled.

Maybe it's this bug
<https://bugzilla.mozilla.org/show_bug.cgi?id=1489411>, which might have
been back-ported into SM 2.53.10.1?

This from Reddit seems to confirm that:

> According to bug 966856 it's because:
>
> It appears that docs.microsoft.com has recently started using OCSP stapling with SHA-256, which is causing Firefox to give certificate errors when connecting to it, unless OCSP stapling is disabled (security.ssl.enable_ocsp_stapling preference).

So the most secure config for now has

security.OCSP.require = true
security.ssl.enable_ocsp_stapling = false

Possibly Ant's FF95 has one or both of the above as false.

/df

--
London
UK

[Ant]

My FF shows:
security.OCSP.require = false
security.ssl.enable_ocsp_stapling = true

My SM shows:
security.OCSP.require = false
security.ssl.enable_ocsp_stapling = true

I never touched them before.
--
Cold & windy winter rain storm came & left a big mess! Dang coldness,
colony, works, strikes, software upgrades, spams, greeds, inflations,
life, etc. again. :(