Bug#887798: firefox-esr: impossible to connect to Google domains

[Vincent Lefevre]

On 2018-01-20 01:32:11 +0100, Vincent Lefevre wrote:
> ------------------------------------------------------------------------
> Your connection is not secure
> 
> The owner of www.google.fr has configured their website improperly. To
> protect your information from being stolen, Firefox has not connected
> to this website.
> 
> This site uses HTTP Strict Transport Security (HSTS) to specify that
> Firefox may only connect to it securely. As a result, it is not
> possible to add an exception for this certificate.
> ------------------------------------------------------------------------
> 
> And after clicking on "Advanced":
> 
> ------------------------------------------------------------------------
> www.google.fr uses an invalid security certificate.
> 
> The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported.
> 
> Error code: SEC_ERROR_UNKNOWN_ISSUER
> ------------------------------------------------------------------------

As a temporary and insecure workaround, I can avoid this error by
setting security.OCSP.require to false, even though the error was
not about OCSP.

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)