← Agence Nationale de Certification Electronique cases
Bugzilla #1663953
Certificate Problem Report
TunTrust: OCSP unreachable
RESOLVED
Agence Nationale de Certification Electronique
AI Summary
The Agence Nationale de Certification Electronique reported an incident involving their OCSP server being unreachable for approximately 20 hours. The issue arose due to an inadvertent deletion of the OCSP server during a patch management process. The CA took immediate action to restore services and has since implemented measures to prevent recurrence, including a review of their disaster recovery configuration and additional training for technical staff.
Chronology
- OCSP server became unreachable
- Incident reported to Bugzilla
- OCSP server restored
- Automation of patch management process started
Participants
pki@tuntrust.tn
ryan.sleevi@gmail.com
bwilson@mozilla.com
External References
Similar Local Cases
TunTrust: Issue with Valid test Certificate
D-TRUST: Issuance of non-conformant SSL certificate
iTrusChina: verification errors for the roots' CRLs(ARL)
SSL.com: Issuance of 3 EV TLS certificates without 2-person validation of the organization information
SSL.com: Issuance of an EV TLS certificate with incorrect O Field Value
SwissSign: failure to provide a preliminary report within 24 hours
Multicert: AIA CA Issuer field pointing to PEM encoded cert
FNMT: Issuance of QCP-n certificates without verifying identity