6 ms·
It can be a headache when their OCSP server and issuance process run into problems that break the Internet for a large number of people. https://community.letse
by discreditable 9y ago
It can be a headache when their OCSP server and issuance process run into problems that break the Internet for a large number of people. https://community.letsencrypt.org/t/may-19-2017-ocsp-and-issuance-outage-postmortem/34922 https://community.letsencrypt.org/t/may-19-2017-ocsp-and-iss...
- BenjiWiebe 9y agoIt's been awhile since I had to deal with ocsp breakage, but if it breaks due to an ocsp server down, doesn't that mean the browser or web server is misconfigured? Of course, if browsers are misconfigured out of the box, that doesn't help at all...
- discreditable 9y agoIt wasn't as simple as the ocsp server being down. It was returning bad request (http 400) responses. When the good responses expired from caches, the bad responses started going out and breakage started spreading. LE detailed this in their postmortem which I linked.