← SwissSign AG cases
Bugzilla #1965828
Self Reported Incident
Security Incident
SwissSign: OCSP outage
RESOLVED
FIXED
SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
SwissSign reported an OCSP outage affecting its responder for one CA platform, which was unreachable from May 12, 2025, between 09:23:58 and 10:13:56 UTC. The incident was self-reported by SwissSign, and a preliminary incident report was published on the same day. A full incident report followed on May 16, detailing the impact on 143 certificates issued during the outage. The root cause was identified as a combination of configuration settings that led to the OCSP service becoming unresponsive. Remediation actions included changing configurations and conducting load tests, which confirmed the new setup could handle significantly higher loads. The case is now resolved, with all action items completed.
Chronology
- OCSP responder for SwissSign was not reachable for a period of time.
- SwissSign published a closure summary detailing the incident and remediation.
Thread Activity
- SwissSign AG — Preliminary incident report posted regarding the OCSP outage.
- SwissSign AG — Full incident report published with details on the outage and its impact.
- SwissSign AG — Closure summary report published, confirming remediation actions.
- CCADB representative — Final call for comments on the incident report before closure.
Participants
SwissSign AG
CCADB representative
External References
Similar Local Cases
SwissSign: recommendation on linting software updates
SwissSign: recommendation on CA-specific risk assessment
SwissSign: recommendation on review of key pair generation implementation
SwissSign: CRL/OCSP revocation time mismatch
SwissSign: EV code in JurisdiktionStateOrProvinceName
SwissSign: Certificate Profile error for S/MIME MV
SwissSign: Missed revocation and opening Bugzilla
SwissSign: S/MIME LCP: CN with values other than email address