← Agence Nationale de Certification Electronique cases
Bugzilla #1895312
Certificate Problem Report
TunTrust: CRL and OCSP unavailable
RESOLVED
Agence Nationale de Certification Electronique
AI Summary
TunTrust experienced an incident on May 3, 2024, where the Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP) services were unavailable due to an internet service provider outage. This affected third-party access to the CRL and OCSP for the TunTrust Root CA. The issue was resolved, and measures are being implemented to prevent future occurrences, including establishing redundant internet connections.
Chronology
- Internet connection to CRL and OCSP services was lost.
- TunTrust requested a detailed incident report from the ISP.
- Contract with ISP signed, action plan fully implemented.
Participants
TunTrust
External References
Similar Local Cases
TunTrust: OCSP unreachable
TunTrust: Issue with Valid test Certificate
DigiCert: 4 CRLs unavailable or not responding
DigiCert: Issuance of certs with weak keys (ROCA)
NAVER Cloud Trust Services: CA Certificate not published in DER Encoded Format
SwissSign: CRL/OCSP revocation time mismatch
DigiCert: Some CRLs were not updated for a few days
DigiCert: Domain used for CRLs and OCSP has expired