SSL stapling, npmjs doesn't send a certificate status packet?

P

postcd

Guest
Geting ocasional Firefox errors when accessing site via HTTPS.

"Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)"

the hosting provider told that:

"npmjs.org doesn't send a certificate status packet (which the browsers require)"

he coppied this from here:

https://github.com/npm/npm-www/issues/832#issuecomment-46756136

but here im unsure how i can fix the issue so default Firefox do not show mentioned error and status packet is sent?
 


You can turn off OCSP stapling temporarily, enter: “about: config” into Firefox address bar. You may see the warning message like below: Click on “I will be careful” and continue:

Mozilla-OCSP.jpg


Search for: security.ssl.enable_ocsp_stapling

Mozilla-OCSP1.jpg


Double clikc to change its value to false:

Mozilla-OCSP2.jpg


Note: this type of arrangement will lower your security, however, after a bit of time when the issue gets resolved completely, you can go back and switch the value “true” again.

Also check the below two URL for more details on this issue:

 

Members online


Top