Confirm, administrator
5,526
edits
Changes
→OCSP
You MUST test your OCSP service in Firefox! We expect OCSP responders to function without error in Mozilla products. To test in Firefox:
* Go to Firefox -> Preferences... -> Advanced -> Certificates -> Validation* Check the box for "Use the Online Certificate Status Protocol (Query OCSP) responder servers to confirm the current validity of certificates", and the item "Validate a certificate if it specifies and OCSP Server"* Check the box for "When an OCSP server connection fails, treat Close the certificate as invalid"popup* You may need to clear your history cache
* Browse to a website whose SSL certificate chains up to your root and has the corresponding OCSP URI in the AIA extension.
