Secure Connection Failed

Reece · 10-14-17, 10:27 PM

I am running Firefox and am getting the following error when I try to login to AliExpress:

Quote:

Secure Connection Failed
An error occurred during a connection to login.aliexpress.com. Invalid OCSP signing certificate in OCSP response. Error code: SEC_ERROR_OCSP_INVALID_SIGNING_CERT

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

I tried on my Tablet and is the same, have also noticed this with other sites as well.
Has anyone got any ideas on how to fix this?

Sean C · 10-14-17, 11:00 PM

Not sure if this will work, but you can try it:

When you visit the site, click on the "i" icon to the left of the address bar.
In the window that pops up, to the right of the website name, click the arrow pointing to the right.
At the bottom of the window, click "More Information".
In the new window that pops up, under the "Security" tab, click "View Certificate".
Under the "Details" tab of the certificate window, click "Export" and save the certificate somewhere you'll remember.
Open Firefox's options via the drop-down menu in the upper right corner.
Under the "Security" tab, scroll down and click "View Certificates".
In the Certificate Manager, click "Import" and select the certificate of the website from the location you saved it to.
If necessary, edit the trust of the certificate.

***NOTE***
Only do the above if you are sure you can trust the site you are on and that it is not being spoofed or redirected. When I visit the site you mentioned, I get a "secure connection" which has been verified by Symantec. One way to verify that this is the same site you've been visiting is to look at the "Privacy and History" section of the window that opened in step 4 above. It will tell you if you've visited the site before and how many times.

Hope this helps. Cheers!

Reece · 10-15-17, 01:08 AM

OK, I got as far as saving the certificate but in the Firefox Options/Security there is only:

Quote:

Security..................?

General

A tick box for "Warn me when sites try to install add-ons"............Exceptions.
A tick box for "Block reported attack sites"
A tick box for "Block reported web forgeries"

Logins

A tick box for "Remember logins for sites"............Exceptions.
A tick box for "Use a Master Password"...............Change Master Password.
.................................................. ................Saved Logins.

Sean C · 10-15-17, 02:12 AM

Hmmm...that's strange. Here is what my options look like. (I added an arrow pointing to the certificates button.)

What version of Firefox are you using? Mine is 56.0.1. You can find the version number in the menu at the top right...click the little question mark and select "About Firefox".

Sean C · 10-15-17, 02:28 AM

Another solution might be to open the location where you saved the certificate, right-click on it and select "install certificate".

Reece · 10-15-17, 03:47 AM

I just found that I have more selections on the left

Applications
Content
Sync
Advanced

Under Advanced there is "View Certificates" so I will carry on there.
There is a tab in the Certificate Manager called "Authorities" with an import tab, should I use that?

Just found under Advanced a ticked box "Query OCSP responder servers to confirm the current validity of certificates" should I just try unticking that since it seems to be related to the fault?

10-14-17, 11:00 PM	#2
Sean C Grey Wolf Join Date: Jun 2017 Location: Norfolk, VA Posts: 907 Downloads: 12 Uploads: 2	Not sure if this will work, but you can try it: When you visit the site, click on the "i" icon to the left of the address bar. In the window that pops up, to the right of the website name, click the arrow pointing to the right. At the bottom of the window, click "More Information". In the new window that pops up, under the "Security" tab, click "View Certificate". Under the "Details" tab of the certificate window, click "Export" and save the certificate somewhere you'll remember. Open Firefox's options via the drop-down menu in the upper right corner. Under the "Security" tab, scroll down and click "View Certificates". In the Certificate Manager, click "Import" and select the certificate of the website from the location you saved it to. If necessary, edit the trust of the certificate. *NOTE* Only do the above if you are sure you can trust the site you are on and that it is not being spoofed or redirected. When I visit the site you mentioned, I get a "secure connection" which has been verified by Symantec. One way to verify that this is the same site you've been visiting is to look at the "Privacy and History" section of the window that opened in step 4 above. It will tell you if you've visited the site before and how many times. Hope this helps. Cheers! Last edited by Sean C; 10-14-17 at 11:12 PM.

10-15-17, 03:47 AM	#6
Reece CINC Pacific Fleet Join Date: Sep 2003 Location: Down Under Posts: 32,756 Downloads: 171 Uploads: 0	I just found that I have more selections on the left Applications Content Sync Advanced Under Advanced there is "View Certificates" so I will carry on there. There is a tab in the Certificate Manager called "Authorities" with an import tab, should I use that? Just found under Advanced a ticked box "Query OCSP responder servers to confirm the current validity of certificates" should I just try unticking that since it seems to be related to the fault? __________________ *Sub captains go down with their ship!*

10-15-17, 02:12 AM	#4
Sean C Grey Wolf Join Date: Jun 2017 Location: Norfolk, VA Posts: 907 Downloads: 12 Uploads: 2	Hmmm...that's strange. Here is what my options look like. (I added an arrow pointing to the certificates button.) What version of Firefox are you using? Mine is 56.0.1. You can find the version number in the menu at the top right...click the little question mark and select "About Firefox".

10-15-17, 02:28 AM	#5
Sean C Grey Wolf Join Date: Jun 2017 Location: Norfolk, VA Posts: 907 Downloads: 12 Uploads: 2	Another solution might be to open the location where you saved the certificate, right-click on it and select "install certificate".