Hey there, are there currently Problems with OCSP? My Apache Logs getting spammed with: [Mon Jul 30 20:18:00.129016 2018] [ssl:error] [pid 20230:tid 140385049319168] (EAI 2)Name or service not known: [client 217.88.235.x:58036] AH01972: could not resolve address of OCSP responder ocsp.int-x3.let…

Hi, Can you please try an ping to the above address? ping ocsp.int-x3.letsencrypt.org Thank you

Server: # ping ocsp.int-x3.letsencrypt.org ping: ocsp.int-x3.letsencrypt.org : Name or service not known Local PC: C:\Users\hellkeeper>ping ocsp.int-x3.letsencrypt.org Ping-Anforderung konnte Host “ ocsp.int-x3.letsencrypt.org ” nicht finden. Überprüfen Sie den Namen, und versuchen Sie es erneut. …

[image] futureweb: ps) @cpu - as I don’t know whom else to ping here … :wink: This is being investigated. There will be a status update shortly

# dig +trace ocsp.int-x3.letsencrypt.org ; <<>> DiG 9.9.4-RedHat-9.9.4-61.el7 <<>> +trace ocsp.int-x3.letsencrypt.org ;; global options: +cmd . 496487 IN NS k.root-servers.net. . 496487 IN NS c.root-servers.net. . …

Yeah, it looks like there’s an issue with the DNS resolution of the letsencrypt.org domain. The glue records are missing from the DNS servers hosting the org. TLD, so recursive resolvers can’t find letsencrypt.org This is affecting services other than OCSP, I can’t renew certificates either right n…

Kepstin, That is correct. We’re busy reaching out to our registrar to determine why this happened. We’ll update the status.io more once we have details.

Chaising namecheap… https://twitter.com/0xjosh/status/1024009279152508928

seems like the chase was successful … :wink: [image]

Seems like the Problem is solved? On my DNS Servers Name Resolution is working again for letsencrypt.org … Not sure if it’s already replicated worldwide … Going to activate OCSP again on our Servers … Andreas ps) looking forward to incident report what went wrong here … (don’t tell me it was a s…

[image] futureweb: (don’t tell me it was a simple “forgot to renew Domain issue”?!? :wink: ) I don't think so :wink: $ whois -h whois.enom.com letsencrypt.org | grep Date Updated Date: 2015-06-08T04:35:04.00Z Creation Date: 2014-07-07T19:54:00.00Z Registrar Registration Expiration Date: 2025…

OCSP responder Problems? (letsencrypt.org DNS Problem)

Help

cpu August 3, 2018, 1:18pm 14

A postmortem has been published: 2018.07.30 Domain Resolution Interruption

Topic		Replies	Views
Not able to reolve OCSP URL Help	1	582	March 15, 2019
Ocsp.int-x3.letsencrypt.org is not working in China Help	31	11523	December 15, 2020
Ocsp.int-x3.letsencrypt.org can not be resolved Help	3	1499	March 7, 2023
OCSP responder returning 503 errors Help	12	3687	May 22, 2020
Ocsp.int-x3.letsencrypt.org could not be resolved Issuance Tech	12	11164	August 3, 2018

OCSP responder Problems? (letsencrypt.org DNS Problem)

Related topics