[Solved] Firefox connection error

[Rich]

This topic is being started to separate it from another thread.

... PS: "something" is wrong with [virgin install] firefox 94+ (on linux, or windows) for some https web-sites, because:

Code: [Select]

https://www.linuxfromscratch.org/blfs/view/svn/x/xorg-server.htmlSecure Connection Failed
An error occurred during a connection to www.linuxfromscratch.org. A required TLS feature is missing.
Error code: MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING
    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

Hi nick65go
A search turned up this:
https://meta.stackoverflow.com/questions/385589/a-required-tls-feature-is-missing-error-code-mozilla-pkix-error-required-tls-f
which suggested setting  security.ssl.enable_ocsp_must_staple setting  to  false  in  about:config.

I'm running Firefox 89.0 (32-bit) and I don't see this issue. Settings containing  ocsp  in my  about:config  are as follows:

Code: [Select]

security.OCSP.enabled 1
security.OCSP.require false
security.OCSP.timeoutMilliseconds.hard 10000
security.OCSP.timeoutMilliseconds.soft 2000
security.ssl.enable_ocsp_must_staple true
security.ssl.enable_ocsp_stapling true
security.xfocsp.errorReporting.automatic false
security.xfocsp.errorReporting.enabled true

[nick65go]

Hi Rich,
My problem is older, because I can not connect even to tinycorelinux.net, etc
in Win10, firefox 94.0.2 (64 bit), in about:config, search for string OCSP:

Code: [Select]

privacy.partition.network_state.ocsp_cache    false   
privacy.partition.network_state.ocsp_cache.pbmode    true   
security.OCSP.enabled    1   
security.OCSP.require    false   
security.OCSP.timeoutMilliseconds.hard    10000   
security.OCSP.timeoutMilliseconds.soft    2000   
security.ssl.enable_ocsp_must_staple    true   
security.ssl.enable_ocsp_stapling    true   
security.xfocsp.errorReporting.automatic    false   
security.xfocsp.errorReporting.enabled    trueAll are reseted to default values; they are same like yours. I have two new "privacy.*", which I can not delete; ublock-origin add is not active etc.

EDIT: wow, I tried from TC12_x86_64 with Firefox 94.0.1 (64 bit) and is OK. WTF, I have the same settings in both.
PS: www.tinycorelinux.net is still not working from TC.

[nick65go]

Hi Rich,
From TC12_64 I tried an old firefox 84.0.2 (64 bit, taken from Tc11_64) and I can connect to http://www.tinycorelinux.net/. and http://tinycorelinux.net/ 
All is OK in TC12_64.This means that firefox is getting more stupid (and bloated) with every new version.

[Rich]

Hi nick65go
Setting  security.ssl.enable_ocsp_must_staple  setting to  false  will probably allow it to work.

[Rich]

@Rich: good tip, but I do not want to hijack this topic.

Setting  security.ssl.enable_ocsp_must_staple  setting to  false  will probably allow it to work.

Cold restart win10, restarted Firefox 94.0.2 and I have partial succes, like:

1- working : https://www.linuxfromscratch.org/blfs/view/svn/x/xorg-server.html

2. -not working https://www.tinycorelinux.net/

Code: [Select]

Hmm. We’re having trouble finding that site.
We can’t connect to the server at www.tinycorelinux.net.
If that address is correct, here are three other things you can try:
    Try again later.
    Check your network connection.
    If you are connected but behind a firewall, check that Firefox has permission to access the Web.
3.- not working https://tinycorelinux.net/

Code: [Select]

Gateway Timeout
Server error - server 89.22.99.37 is unreachable at this moment.
Please retry the request or contact your administrator.

[Rich]

Hi nick65go
I don't think any of the  tinycorelinux.net  URLs use  https , and  http://tinycorelinux.net/  is currently down.

[nick65go]

Rich,
Your tips were very good, problem is solved. I updated my bookmark to http://www.tinycorelinux.net/ and is good now. Thanks for clarification.

PS: even http://tinycorelinux.net/ is working now. Lesson: without https, just http.

[Rich]

Hi nick65go

Your tips were very good, problem is solved. ...

Thanks, glad I could help. Thread has been marked as solved.