← Agence Nationale de Certification Electronique cases
Bugzilla #1663953
Incident
TunTrust: OCSP unreachable
RESOLVED
FIXED
Agence Nationale de Certification Electronique
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The Agence Nationale de Certification Electronique (TunTrust) reported an incident where their OCSP server was unreachable for approximately 20 hours due to an inadvertent deletion during a patch management process. The CA discovered the issue internally and promptly initiated a bug report. They outlined the timeline of events, including the identification of the problem and the restoration of services. The CA confirmed that no certificates were mis-issued during this downtime and committed to a detailed action plan to prevent future occurrences, including changes to their disaster recovery configuration and training for technical staff.
Chronology
- OCSP server became unreachable due to a configuration error.
- OCSP server restored and services resumed.
Thread Activity
- Agence Nationale de Certification Electronique — Reported the OCSP server issue and committed to submitting a detailed report.
- Agence Nationale de Certification Electronique — Provided a detailed summary of the incident and actions taken.
- Community commenter — Commended the proactive communication and suggested deeper evaluation of root causes.
- Agence Nationale de Certification Electronique — Updated on the completion of the action plan addressing the incident.
Participants
Agence Nationale de Certification Electronique
Community commenter
Mozilla representative
External References
Similar Local Cases
TunTrust: CRL and OCSP unavailable
DigiCert: Failure to provide a preliminary report within 24 hours.
Sectigo: Incorrect OCSP responses
GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31
SSL.com: Issuance of 3 EV TLS certificates without 2-person validation of the organization information
IdenTrust: Unavailable CRL for IdenTrust ‘DST Root CA X3’.
KIR S.A.: DV certificates with locality name, organization name and stateOrProvinceName
GlobalSign: SHA-256 hash algorithm used with ECC P-384 key