Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

How can you set Firefox to, or tell if FF is always checking for certificate revocation?

  • 2 个回答
  • 4 人有此问题
  • 1 次查看
  • 最后回复者为 cor-el

Sonic4Spuds
Sonic4Spuds
more options

I am anticipating a number of certificate revocations related to the heartbleed voulnerability, and would like to be able to check whether Firefox is checking for revocation, and tell it to if not.

I am anticipating a number of certificate revocations related to the heartbleed voulnerability, and would like to be able to check whether Firefox is checking for revocation, and tell it to if not.

被采纳的解决方案

By default, Firefox will check but, if the OCSP server is not available, will accept the certificate for the time being.

Edit menu > Preferences > Advanced > Certificates mini-tab > "Validation" button

定位到答案原位置 👍 6

所有回复 (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

选择的解决方案

By default, Firefox will check but, if the OCSP server is not available, will accept the certificate for the time being.

Edit menu > Preferences > Advanced > Certificates mini-tab > "Validation" button

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

For this heartbleed issue you can also temporarily disable OCSP Stapling by setting the security.ssl.enable_ocsp_stapling pref to false on the about:config page.

Make sure to check in a few days if you still need this workaround and if necessary reset the pref to true.