Re: OCSP error in icecat

[Andreas Enge]

On Wed, Apr 09, 2014 at 10:29:24PM +0200, Ludovic Courtès wrote:
> Perhaps it’d be best to bring it on address@hidden

I started writing a bug report, but decided against sending it; I think the
problem is with the web server (the certificate of which has expired, by the
way).

> Andreas Enge <address@hidden> skribis:
> > The following site explains how to turn off OCSP verification:
> >    
> > http://www.ghacks.net/2013/10/02/fix-ocsp-server-refused-request-unauthorized-firefox/

Well, "turn off" was too strongly worded here: When one unchecks
  Edit -> Preferences -> Advanced -> Certificates -> Validation
  -> "When an OCSP server connection fails, treat the certificate as invalid",
then the checks still work if the server replies. I think this is a reasonable
solution, but each user has to apply it individually.

Andreas