2
1
Oddly, python.org has suddenly become unreachable for me through the Archlinux repo version of Firefox (v27 and v28.0 update):
Secure Connection Failed
An error occurred during a connection to www.python.org. The OCSP response is not yet valid (contains a date in the future).
(Error code: sec_error_ocsp_future_response)
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
I've read Mozilla site recommends:
- Clear cache (or reload not from cache) (ok)
- Check your computer's time settings (ok)
- Check
about:config
settings:security.OCSP.enabled = 1
(ok)security.enable_ssl
&security.enable_tls
(I think this last one is outdated, because my version readssecurity.[some protocol].enable
)
- Check proxy settings (don't have one)
- If you're having trouble with one site, use this checker (passed)
With 65 settings in about:config
with the term 'security', I don't even know where to begin turning things on and off. Like what is security.OSCP.GET.enabled=false
setting? Sounds like it should be on, but its off. Although I don't have any trouble with logging into my bank's web site.
All points point to python.org having the trouble, but can I be sure? And why the heck is python.org a secure site anyway?
@xtian try to use this site to test the website you are talking about. https://www.ssllabs.com/ssltest/analyze.html?d=jbclick.jaxbchfl.net
– cokedude – 2015-04-26T20:04:48.717@Ramhound are you sure this is a SSL issue and not a TLS issue? I know sometime in 2014 the POODLE attack came out and because of that sites tried to stop using SSL. – cokedude – 2015-04-26T20:07:20.640
@cokedude - TLS is SSL, its the samething they just changed the name. – Ramhound – 2015-04-26T21:06:34.150
Wow. This is a zombie-post. Hahah. I haven't noticed this problem recently, and SSL is outside my bailiwick.
So, someone (@Ramhound ?) wants to upvote the answer, I'll mark it answered and put it to bed. (>_<) – xtian – 2015-04-27T21:15:01.313
@xtian - I have not really said anything with enough quality to submit it as an answer. – Ramhound – 2015-04-27T23:28:51.060
I am going to guess the reason you can't connect is because the website revoked it's ssl certificate. It's possible this is on purpose – Ramhound – 2014-04-16T21:41:32.917
@Ramhound thanks for your input. While that may be true, I found something on the Arch site reminding me of a stupid Arch-thingy. The clock was lagging by five hours but the date was correct (its a laptop and happens more than I wish). After I followed these page steps to update my system's time using
– xtian – 2014-04-16T21:54:30.237date
instead oftimedatectl
python.org is again visible. Despite this discrepancy, why in the world can I log into my bank, but not python.org?? Talk about paranoid!SSL is complicated. We would need to know what the bank website does and does not support. Its also a separate question. If your wondering OSCP is connected to checking the status of the certification chain. – Ramhound – 2014-04-16T21:59:19.933