← Agence Nationale de Certification Electronique cases
Bugzilla #1895312
Incident
TunTrust: CRL and OCSP unavailable
RESOLVED
FIXED
Agence Nationale de Certification Electronique
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
TunTrust reported an incident where the Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP) services were unavailable due to an internet connectivity issue caused by their Internet Service Provider (ISP) on May 3, 2024. The outage lasted from 17:12 to 20:02 UTC, preventing third parties from accessing the CRL and OCSP services. TunTrust confirmed that no certificates were affected by this incident. Following the incident, TunTrust has taken steps to improve their internet redundancy and has signed a new contract with the ISP to ensure better service reliability. The bug has been resolved as the action plan has been fully implemented.
Chronology
- Internet connection to CRL and OCSP services was unavailable.
- Contract with ISP was successfully signed, completing the action plan.
Thread Activity
- Certification representative — Preliminary incident report submitted detailing the outage.
- Certification representative — Update provided with root cause analysis and action items.
- Agence Nationale de Certification Electronique — Confirmed that the contract with the ISP was signed and action plan implemented.
Participants
Certification representative
Mozilla representative
Community commenter
Login representative
External References
Similar Local Cases
TunTrust: OCSP unreachable
IdenTrust: Invalid OrganizationIdentifier in S/MIME certificates
SSL.com: Issuance of 3 EV TLS certificates without 2-person validation of the organization information
PKIoverheid: Delayed audit statements for intermediate CAs
Asseco DS / Certum: CP/CPS, Revocation Requests Mechanism, Certificate Problem Report, CRL and OCSP disruption
Apple: OCSP availability 2020-11-12
NETLOCK: Disclosed CRL is expired
NETLOCK: CRL not published in DER Encoded Format