Firefox shows sec error "TRY_SERVER_LATER"

Server
1

Getting SEC_ERROR_OCSP_TRY_SERVER_LATER this morning in FireFox.

Tried many supposed workarounds + none seem to work.

If someone has a working fix for this problem, add it to this ticket.

Thanks.

2

I had to create this ticket with a useless title because LetsEncrypt software kept saying my title made no sense.

Very annoying.

Be great if someone could disable this feature, so sensible titles can be used.

3

Seems like anytime I add SEC_ERROR_OCSP_TRY_SERVER_LATER to the title, the forum disallows posting the title.

4

That's annoying! Sorry about that. That's the first time I've seen this "Not a complete sentence" detection. I'm not sure if there's an easy way to disable it so for the meantime I set the title to something "English-enough" for the forum.

5

What is the domain of the site you're trying to access when Firefox shows this error?

6

Awesome! Thanks for fixing my title. I swear I tried all sort of titles + no joy.

7

Works in all other browsers.

Hum… Maybe something’s wrong with this cert too. Other LetsEncrypt cert secured sites seem to be working.

8

Ah… Found the problem…

For some reason dnsmasq crashed, so the OSCP server name could never resolve.

Fixed now.

Thanks!

1 Like
9

Great ! Glad to hear it. I was able to confirm from here that an OCSP lookup for that certificate worked OK from my network vantage point. I also can verify that the server is stapling a valid OCSP response for the certificate in its TLS handshake.

10

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.