Firefox blocking microsoft websites. Why?

[Falnor]

Firefox has started blocking loads of websites with the error message Secure Connection Failed

I'm not talking about just 1 or 2 sites. I'm talking loads particularly microsoft websites.

I can't even do a websearch on bing anymore or access my hotmail account using Firefox.

I have tried Firefox on three different computers and it's the same on all.

These same sites work fine on all other web browsers.

What's going on?

[Happy112]

Since last night this looks like an epidemic - this is a misconfiguration on microsoft's server side.
If you want to, you can disable OCSP (which is a security mechanism) :
3-bar menu (the three horizontal lines in the upper right corner, right under the closing X) => Advanced => Certificates panel
And Let's keep our fingers crossed that Microsoft will fix the issue soon.

----------------------------------------------------------------------------------------------------------------------------

Another way to disable OCSP - or better still : do both :
Type in the address bar 'about:config' (press Enter)
(promise to be careful, if asked)
Type and look for the preference :
'security.ssl.enable_ocsp_stapling'
and set it's value to 'false'

It is best to reset this pref via the right-click context menu to 'true' once you are done with this
website.

----------------------------------------------------------------------------------------------------------------------------

Also see :

https://answers.microsoft.com/en-us/win ... fb6f3bc0d9

[Falnor]

I'll wait a day or two to see if Microsoft fix this misconfiguration before disabling OCSP.

But it does seem odd that only Firefox is effected. All other browsers work

[FFman]

Have you an example URL? I seem to be OK!

[LIMPET235]

Hi,
A few links to "those" sites may help.....?

[FFman]

Ah, https://www.hotmail.com fails but curiously http://www.hotmail.com works i.e. it gets diverted to the live.com signin.

[Falnor]

Hi,
A few links to "those" sites may help.....?

outlook.com
msn.com after typing in search bar

Even the Firefox address and search bar are effected when Bing is set as default search.

[TheVisitor]

Hi,
A few links to "those" sites may help.....?

outlook.com
msn.com after typing in search bar

Even the Firefox address and search bar are effected when Bing is set as default search.

Both sites work for me using latest Nightly 'test build'.

[Falnor]

Actually within the last few minutes I've been able to access both sites on Firefox. Also the search bar in Firefox has started working again.

Maybe Microsoft are fixing it?

EDIT: Never mind. Search bar has stopped working again. Problem seems to be intermittent. One minute it's working and the next i'm getting that error.

[therube]

(Copied from, http://forums.mozillazine.org/viewtopic ... #p14750007)

Getting the same problem on ... microsoft sites

I had one yesterday on a MS site.
Thought it to be odd, wondered why it happened, but didn't pursue it.
(If I'm recalling it was on a MS "consumer support" site [link].)

Here:
https://social.technet.microsoft.com/Forums/en-us/home

But its a different error:

Code: Select all

Secure Connection Failed

An error occurred during a connection to social.technet.microsoft.com.

Invalid OCSP signing certificate in OCSP response.

Error code: <a id="errorCode" title="SEC_ERROR_OCSP_INVALID_SIGNING_CERT">SEC_ERROR_OCSP_INVALID_SIGNING_CERT</a>

Someone noted the Pref, security.ssl.enable_ocsp_stapling.
Toggling that does allow the MS site to load, but no clue as to what "ocsp stapling" is...

The OCSP response validity range is 2017-03-14T21:40:24Z to 2017-05-28T21:40:24Z (expired yesterday at 9:40pm). This is correctly identified by both Firefox and Chrome as an expired certificate. Firefox treats the error as fatal and refuses to load the page, while Chrome still loads the page but does not consider the connection to be secure.

Other MS sites (that now fail):

https://www.bing.com/
https://onedrive.live.com/



Issues while accessing Visual Studio Team Services through Firefox browser – 05/29 – Investigating


Bug 1368433 Can no longer connect to various microsoft domains with SEC_ERROR_OCSP_INVALID_SIGNING_CERT

[Happy112]

To all :
Microsoft is working on it , see : https://twitter.com/vcsjones

I started a thread about this on Mozilla's contributor forum this morning, see :

https://support.mozilla.org/en-US/forum ... post-71791

[Happy112]

To all - update :

https://portal.office.com/servicestatus

The problem lies with Microsoft, whose servers (in layman's terms) send an expired assurance that their SSL certificate is still valid.
Unfortunately it turns out that Firefox is the only browser checking for this on each secure https site it is loading.
(whereas other browsers glance over that and only check for :

https://en.wikipedia.org/wiki/Extended_ ... tificate).

[Grumpus]

This Azure Cloud Portal
Funny what's accepted and what isn't though the article states unlikely any prejudice, maybe it was pixies?

[Happy112]

To all - update :

Microsoft are now saying at https://portal.office.com/servicestatus that they fixed 70% of their servers and should be done with the rest of them today - not sure if this is just applying to outlook/hotmail though or to their whole network ……

[lovemyfoxy]

Firefox is smarter than other browsers, and wants to keep us away from MS.