OCSP ERROR on SSLLabs

My domain is:
oxywp.ml
I ran this command:
SSL Server Test
https://www.ssllabs.com/ssltest/analyze.html?d=oxywp.ml&hideResults=on
It produced this output:
**Revocation status Validation error
OCSP ERROR: Exception: connect timed out [http://r3.o.lencr.org]
My web server is (include version):
LiteSpeed/1.6.19 Open
The operating system my web server runs on is (include version):
UBUNTU 20.04.2 LTS

I can login to a root shell on my machine (yes or no, or I don't know):
Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Litespeed webadmin
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 0.40.0

How can I fix this. Please help. Thank you so much.

1 Like

Hi @Doxobit

see

Looks like a temporary Ssllabs problem.

3 Likes

Yeah and once again it is now reporting correctly.
https://www.ssllabs.com/ssltest/analyze.html?d=oxywp.ml&hideResults=on
09:24 Friday 29 Jan 2021 PST

1 Like

Yes, pretty much every other software I test it on reports success.

2 Likes

Unfortunately, it looks like SSL Labs' "temporary" problem has now expanded (or recurred) for many days. I'm starting to wonder what's going on over there at SSL Labs.

Me too.. I wonder if an inquiry is in order... I am wondering about
http://r3.o.lencr.org though.
Remember "when one finger is pointed at someone else THREE are pointing back at you."

1 Like

I asked about this several days ago in a PM I sent to the Let's Encrypt staff:

@griffin:

Sorry for the broad ping. I tried just writing to lestaff, but couldn't. I can write to certbot-devs though, so maybe PMs are disabled for lestaff?

I just noticed something strange on a help-seeker's SSL Server Test from SSL Labs. I decided to notify you in a private message to prevent confusing the help-seeker with what might be a general issue (or no issue at all). I checked the OCSP server status on letsencrypt.status.io, which indicated no specific outage.

@JamesLE:

Thanks for your vigilance! In this case, I think it was an SSLLabs issue; our OCSP metrics have all been looking good.

1 Like

VERIFIED:
This is a SSLLABS issue. I tested a few dozen random websites and the OCSP error is intermittent at best regardless of the CA.

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.