Avatar for Username

Hilfe durchsuchen

Vorsicht vor Support-Betrug: Wir fordern Sie niemals auf, eine Telefonnummer anzurufen, eine SMS an eine Telefonnummer zu senden oder persönliche Daten preiszugeben. Bitte melden Sie verdächtige Aktivitäten über die Funktion „Missbrauch melden“.

Weitere Informationen

Dieses Thema wurde archiviert. Bitte stellen Sie eine neue Frage, wenn Sie Hilfe benötigen.

Firefox-only connection problems with some SSL sites network-wide

  • 3 Antworten
  • 11 haben dieses Problem
  • 8 Aufrufe
  • Letzte Antwort von gohanman

gohanman
gohanman
more options

I recently starting experiencing problems with sites not loading in Firefox with the error "Connection was interrupted". I've consistently seen this problem trying to load accounts.google.com. The problem exists in both versions 3.6.26 (OS X 10.4 latest available) and 10.0.1 (Windows XP/7/server2k3). In every single case, other browsers on the same system (Safari, various IE versions) can load the same URLs just fine.

I've already verified no proxy (FF and working browsers, all OSes), disabled ipv6 and preteching in network.dns, disabled all add-ons, deleted existing profiles, cleared cache, and cleared recent history. Existing articles suggest disabling DNS prefetch,

I recently starting experiencing problems with sites not loading in Firefox with the error "Connection was interrupted". I've consistently seen this problem trying to load accounts.google.com. The problem exists in both versions 3.6.26 (OS X 10.4 latest available) and 10.0.1 (Windows XP/7/server2k3). In every single case, other browsers on the same system (Safari, various IE versions) can load the same URLs just fine. I've already verified no proxy (FF and working browsers, all OSes), disabled ipv6 and preteching in network.dns, disabled all add-ons, deleted existing profiles, cleared cache, and cleared recent history. Existing articles suggest disabling DNS prefetch,

Alle Antworten (3)

gohanman
gohanman Fragesteller
more options

Follow up: if I pass connections through a Fiddler proxy Firefox (10.0.1, connection fails) issues repeated ocsp requests to ocsp.thawte.com. These requests all get an HTTP 502 back. IE (8, connection works) does not issue a similar request.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Do you have a specific OCSP server set or aborting when validation fails?

Check the OCSP settings:

  • Firefox > Preferences > Advanced > Encryption: Certificates: Validation
  • [ ] "When an OCSP server connection fails, treat the certificate as invalid"

See also:

gohanman
gohanman Fragesteller
more options

Nope. Settings are default as far as I can tell. Validate a certificate if it specifies an OCSP server is selected, connection-fails-invalid is not checked.

I resolved the issue after talking to my ISP - there was a DNS caching issue and I was getting an invalid IP for ocsp.thawte.com - but the behavior seems buggy. The OCSP server connection WAS failing (with a timeout) and per Fiddler FF just keeps issuing repeat OCSP requests before eventually giving up with the interrupted connection error. The "When an OCSP server connection fails" option doesn't seem to do what it says in this case; prior to getting the DNS issue fixed the only solution was to disable OCSP completely.

Perhaps the problem is that the OCSP connection timed out rather than being refused or unresolvable, but recognizing multiple timeouts as a connection failure might be more user-friendly.