You are here: Home > Participate > Join a Discussion > Mailman Archives

Re: [certtest] OCSP validation of the SSL certificate for https://certtest.ripe.net is failing

  • To: Marcus Stoegbauer ms@localhost, badplus@localhost
  • From: Trudy Prins trudy@localhost
  • Date: Mon, 22 Dec 2008 10:42:28 +0100

Hi Marcus,

We will try to figure out what goes wrong here, can be the certificate
is expired.

thanks for noticing :-)

Trudy Prins
Manager Business Applications
RIPE NCC

Marcus Stoegbauer wrote:
> Hi,
> 
> in case you have problems connecting to https://certtest.ripe.net with
> Firefox3, have a look at Preferences/Advanced/Encryption, Button Validation.
> If you have the option "When an OCSP server connection fails, treat the
> certificate as invalid" enabled, you will get the following error message
> from Firefox:
> 
> Secure Connection Failed
> 
> An error occurred during a connection to certtest.ripe.net.
> 
> Invalid OCSP signing certificate in OCSP response.
> 
> (Error code: sec_error_ocsp_invalid_signing_cert)
> 
> 
> As far as I can tell the OCSP servers at the registrar who issued the
> certificate for certtest.ripe.net claims that the cert is unknown to him.
> 
>    Marcus
> 

-- 
Trudy