CA/Required or Recommended Practices: Difference between revisions

CA/Required or Recommended Practices (view source)

132 bytes added , 7 July 2010

OCSP Error code: sec_error_bad_database

106

edits

@@ Line 76: / Line 76: @@
 ** OCSP Signing cert has not been imported. Mozilla users should not have to find and install the OCSP responder's certificate. See [[CA:Problematic_Practices#OCSP_Responses_signed_by_a_certificate_under_a_different_root|Potentially Problematic Practices.]]
 * Error code: sec_error_bad_database
-** If you were trying to find/fetch something, it cannot be found.
+** the OCSP response gives a cert subject name to identify its signer's certificate, but no certificate by that name can be found -- not in the response, not in the database, and not in the cert chain of the certificate whose status is being checked. See [https://bugzilla.mozilla.org/show_bug.cgi?id=560091 this bugzilla bug] for more details.
-** If you were trying to store something, there is already such a thing in the DB, and your attempt to store it would overwrite that other thing.
 == Notes for future work ==