eMudhra: CRL occasionally unavailable and returns 404 error

This case reports that eMudhra’s CRL for the “emSign ECC Root CA - G3” (http://crl.emsign.com?RootCAG3.crl) occasionally returns an HTTP 404 error. The issue was observed via SSLmate CRL Watch, and eMudhra stated that their team noticed the problem around 06-Mar-2023. eMudhra investigated, added monitoring (including third-party uptime monitoring and continuous replication of CRL downloads from multiple regions), and determined the suspected cause as a CRL delivery service failing to load CRLs randomly. eMudhra applied an update to the CRL delivery service with necessary tests on 10-Mar-2023 and continued monitoring, stating that the problem impacted CRL responses only and not certificate issuance. In later updates, eMudhra reported that the CRL service was functioning normally, that they did not see the issue again in SSLmate CRL Watch, and that they expanded monitoring to all CRL distribution endpoints listed in CCADB. The bug was resolved as FIXED.

1. 2023-03-06 eMudhra observed intermittent CRL Watch alerts indicating possible CRL delivery problems for some CRL endpoints.
2. 2023-03-10 eMudhra applied an update to the CRL delivery service (with tests) based on log observations.
3. 2023-03-31 eMudhra expanded monitoring to all CCADB-listed CRL distribution endpoints and reported satisfactory results.

1. 2023-03-09 Mm representative — Reported that the RootCAG3 CRL URL occasionally returns HTTP 404 with a FileNotFoundException-style error response.
2. 2023-03-11 Emudhra representative — Acknowledged the bug, described investigation and monitoring steps, and stated an interim update that a CRL delivery service update was applied while monitoring continued.
3. 2023-03-21 Emudhra representative — Reported continued monitoring with normal CRL service behavior and no recurrence in SSLmate CRL Watch.
4. 2023-03-31 Emudhra representative — Stated they added monitoring for all CCADB-listed CRL distribution endpoints and requested closure of the bug.