← Asseco Data Systems S.A. cases
Bugzilla #1909203
Certificate Problem Report
Asseco DS / Certum: CP/CPS, Revocation Requests Mechanism, Certificate Problem Report, CRL and OCSP disruption
RESOLVED
FIXED
Asseco Data Systems S.A.
AI Summary
On July 21, 2024, during scheduled network maintenance, Asseco Data Systems experienced a disruption that rendered their CP/CPS, Revocation Requests Mechanism, Certificate Problem Report, CRL, and OCSP services unavailable. This incident violated several Baseline Requirements (BR) regarding service availability. The issue was caused by an incorrect route configuration during the second phase of maintenance. The disruption lasted approximately 1-2 hours but did not affect certificate issuance. A full incident report was promised by August 2, 2024, and subsequent updates indicated that all action items related to the incident have been completed.
Chronology
- Scheduled network maintenance began, leading to service disruption.
- Full incident report promised.
- Action items to prevent future incidents completed.
- All action items confirmed completed.
- Request to close the case due to lack of further questions.
Participants
Wojciech Trapczyński
Kateryna Aleksieieva
Ben Wilson
External References
Similar Local Cases
Asseco DS / Certum: Cross-certificate not included in 2024 S/MIME Audit statement
Asseco DS / Certum: Irregularities in Xinchacha/Xcc Brand SSL Certificates
Asseco DS / Certum: DNS service outage
Asseco DS / Certum: CRL non-conformance with the TLS BRs
Asseco DS / Certum: Failure to provide a preliminary report within 24 hours.
Asseco DS / Certum: Unallowed key usage for EC public key (Key Encipherment)
Asseco DS / Certum: Failure to revoke intermediate certificates within the BR time period
Asseco DS / Certum: CRL URLs disclosed in CCADB do not exactly match the CRL URLs in certificates