← Microsec Ltd. cases
Bugzilla #1844514
Certificate Problem Report
MICROSEC: Incident report - No OCSP status response for 2 Precertificates
RESOLVED
FIXED
Microsec Ltd.
AI Summary
Microsec Ltd. reported an incident involving the failure of their OCSP responder to provide status for two precertificates. The issue was identified on July 18, 2023, following a notification received via phone. An internal investigation revealed that a configuration error in the CA software led to the precertificates not being added to the OCSP responders database. Immediate corrective actions included revoking the problematic precertificates and implementing a fix to improve the issuance process. As of September 15, 2023, no further OCSP issues have been reported, and the automated testing tool for monitoring OCSP status is now operational.
Chronology
- Received notification of OCSP issues and opened internal investigation.
- Completed initial investigation and implemented immediate fixes.
- No further OCSP problems reported; automated testing tool activated.
Participants
dr. Sándor SZŐKE
bwilson@mozilla.com
External References
Similar Local Cases
Microsec: Late response to a CPR
Microsec: Expired Certificates on test Pages for Revocation
Microsec: Incorrect OCSP Delegated Responder Certificate
Microsec: "DV valid" test website certificate issued under incorrect root
Microsec: Disallowed subject attribute field in DV certificate
Microsec: Issuance of 2 IVCP precertificates without givenName, surName, localityName fields
Microsec: CT Logging mistakes
Microsec: Inconsistent Disclosure of S/MIME BR Audit Information in CCADB