In the new Certificate the OCSP URI is defined as http://r3.o.lencr.org but most time this url send an HTTP-400 back. I found that if i use http://r3.o.lencr.org/ocsp it works fine. Is this an intended behavior? Because in the rfc i did not find the hint hat the uri from the certificate is missing …

Those packet captures show that you putting the absolute Request-URI (including scheme, host, path) into the HTTP request line. In effect, you are requesting http://r3.o.lencr.orghttp://r3.o.lencr.org/ocsp (depending on how the Akamai servers chooses the interpret it, I guess?). This is not correc…

OCSP-URI r3.o.lencr.org

Client dev

ezekiel February 23, 2021, 4:47pm 19

Here's an interesting piece of our history regarding exactly this slash: May 19, 2017: OCSP and Issuance Outage Postmortem

6 Likes

Topic		Replies	Views
Any known uptime/connectivity issues with r3.o.lencr.org? Help	4	1044	May 9, 2021
Choosing OCSP cache time Help	3	1271	August 28, 2021
OCSP responder returning 503 errors Help	13	3389	July 2, 2020
OCSP r3.o.lencr.org is not working in China for 184.50.87.27 Help	9	941	May 26, 2022
Responder Error: unauthorized (6) Help	13	7835	January 19, 2020

OCSP-URI r3.o.lencr.org

Related topics