This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Denc nañu waxtaan wii. Yónneel yeneen laaj soo soxlaa ndimbal.

How can you set Firefox to, or tell if FF is always checking for certificate revocation?

  • 2 tontu
  • 4 am na jafe-jafe bii
  • 1 view
  • i mujjee tontu mooy cor-el

Sonic4Spuds
Sonic4Spuds
more options

I am anticipating a number of certificate revocations related to the heartbleed voulnerability, and would like to be able to check whether Firefox is checking for revocation, and tell it to if not.

I am anticipating a number of certificate revocations related to the heartbleed voulnerability, and would like to be able to check whether Firefox is checking for revocation, and tell it to if not.

Saafara biñ tànn

By default, Firefox will check but, if the OCSP server is not available, will accept the certificate for the time being.

Edit menu > Preferences > Advanced > Certificates mini-tab > "Validation" button

Jàng tontu lii ci fi mu bokk 👍 6

All Replies (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

Saafara yiñ Tànn

By default, Firefox will check but, if the OCSP server is not available, will accept the certificate for the time being.

Edit menu > Preferences > Advanced > Certificates mini-tab > "Validation" button

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

For this heartbleed issue you can also temporarily disable OCSP Stapling by setting the security.ssl.enable_ocsp_stapling pref to false on the about:config page.

Make sure to check in a few days if you still need this workaround and if necessary reset the pref to true.