Avatar for Username

Sykje yn Support

Mij stipescams. Wy sille jo nea freegje in telefoannûmer te beljen, der in sms nei ta te stjoeren of persoanlike gegevens te dielen. Meld fertochte aktiviteit mei de opsje ‘Misbrûk melde’.

Mear ynfo

Dizze konversaasje is argivearre. Stel in nije fraach as jo help nedich hawwe.

How can you set Firefox to, or tell if FF is always checking for certificate revocation?

  • 2 antwurd
  • 4 hawwe dit probleem
  • 1 werjefte
  • Lêste antwurd fan cor-el

Sonic4Spuds
Sonic4Spuds
more options

I am anticipating a number of certificate revocations related to the heartbleed voulnerability, and would like to be able to check whether Firefox is checking for revocation, and tell it to if not.

I am anticipating a number of certificate revocations related to the heartbleed voulnerability, and would like to be able to check whether Firefox is checking for revocation, and tell it to if not.

Keazen oplossing

By default, Firefox will check but, if the OCSP server is not available, will accept the certificate for the time being.

Edit menu > Preferences > Advanced > Certificates mini-tab > "Validation" button

Dit antwurd yn kontekst lêze 👍 6

Alle antwurden (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Keazen oplossing

By default, Firefox will check but, if the OCSP server is not available, will accept the certificate for the time being.

Edit menu > Preferences > Advanced > Certificates mini-tab > "Validation" button

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

For this heartbleed issue you can also temporarily disable OCSP Stapling by setting the security.ssl.enable_ocsp_stapling pref to false on the about:config page.

Make sure to check in a few days if you still need this workaround and if necessary reset the pref to true.