OCSP ERROR on SSLLabs

Help
1

My domain is:
oxywp.ml
I ran this command:
SSL Server Test
https://www.ssllabs.com/ssltest/analyze.html?d=oxywp.ml&hideResults=on
It produced this output:
**Revocation status Validation error
OCSP ERROR: Exception: connect timed out [http://r3.o.lencr.org]
My web server is (include version):
LiteSpeed/1.6.19 Open
The operating system my web server runs on is (include version):
UBUNTU 20.04.2 LTS

I can login to a root shell on my machine (yes or no, or I don't know):
Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Litespeed webadmin
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 0.40.0

How can I fix this. Please help. Thank you so much.

1 Like
2

Hi @Doxobit

see

Looks like a temporary Ssllabs problem.

2 Likes
3

Yeah and once again it is now reporting correctly.
https://www.ssllabs.com/ssltest/analyze.html?d=oxywp.ml&hideResults=on
09:24 Friday 29 Jan 2021 PST

1 Like
4

Yes, pretty much every other software I test it on reports success.

2 Likes
5

Unfortunately, it looks like SSL Labs' "temporary" problem has now expanded (or recurred) for many days. I'm starting to wonder what's going on over there at SSL Labs.

6

Me too.. I wonder if an inquiry is in order... I am wondering about
http://r3.o.lencr.org though.
Remember "when one finger is pointed at someone else THREE are pointing back at you."

1 Like
7

I asked about this several days ago in a PM I sent to the Let's Encrypt staff:

@griffin:

Sorry for the broad ping. I tried just writing to lestaff, but couldn't. I can write to certbot-devs though, so maybe PMs are disabled for lestaff?

I just noticed something strange on a help-seeker's SSL Server Test from SSL Labs. I decided to notify you in a private message to prevent confusing the help-seeker with what might be a general issue (or no issue at all). I checked the OCSP server status on letsencrypt.status.io, which indicated no specific outage.

@JamesLE:

Thanks for your vigilance! In this case, I think it was an SSLLabs issue; our OCSP metrics have all been looking good.

1 Like
8

VERIFIED:
This is a SSLLABS issue. I tested a few dozen random websites and the OCSP error is intermittent at best regardless of the CA.

3 Likes
9

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.