Azure Portal rejects Firefox after certificate revocation SNAFU

Re: Impacts other MS services

we're restarting affected systems to force a certificate update

Yup. Several decades in, and rebooting the entire machinery is still the main solution to Microsoft problems. I can recall places where I've worked where we did an annual reboot just to clear out some dead wood and verify recovery processes still worked as required, but I've never seen a Windows admin reach those giddy highs of reliability without extensive hardware support like clustering.

I even worked somewhere where we "convinced" two Dell desktops to be test servers (we couldn't get a budget for servers so we got creative instead) and we postponed an update for a week just so we could annoy the Windows sysadmins with an uptime of a full year. Granted, they were just guinea pigs for some experiments, but we're talking about very basic machinery here. I think we were running SuSE for that, but whatever it was, it was solid. They also happily thumbed their nose at the ILoveYou virus that zapped the rest of the company's IT for almost a week :).

So, please feel free to continue using Windowsy stuff, just don\t come crying when it's down once again. We like uptime :).

Re: Firefox doesn't use the OS certificate store

And what's that got to do with the price of fish? You can configure Firefox 49 or above to use Windows' certificate store if you must.

Firefox seems to be rejecting a malformed certificate, the rest don't seem to be. That's a point in Firefox's favour.

Last time this happened (that I know of) Microsoft pointed the finger at Akamai, as they handle the certificates - I wonder if this has happened again, but this time Microsoft aren't pointing at them.

I had to make a temporary change in about:config (and I was most disappointed as there were no dragons) to change security.ssl.enable_ocsp_must_staple;true to false, this morning I changed it back.

Certificates do seem to cause problems for many people, not just Microsoft - recently my employer changed the certificate on the wifi, and the queues I had on the helpdesk were formidable.