Validation error

Help
1

Hello,

I have tested few domains with Let’s encrypt configured on www.ssllabs.com/ssltest. All of them report error:

Revocation status:
_Validation error _
OCSP ERROR: Exception: Read timed out [http://ocsp.int-x3.letsencrypt.org/]

Is there some problem with OCSP server?

2

Hi,
check the index site here.


Service disruption !

Rgds.

3

Hello,

I am having problems with cert generation too, see https://letsencrypt.status.io - it seems they’re occasionally online and then down again… my issue will be different to yours but it looks like a LetsEncrypt problem opposed to a client side one.

Andrew

4

Similar problem here. I can’t get https://acme-v01.api.letsencrypt.org/directory
I receive this as a response:

An error occurred while processing your request.
Reference #97.5df01202.1495177010.29048906

5

On index site is just info about disruption of acme-v01.api.letsencrypt.org for certificatie issuing. Status website http://letsencrypt.status.io/ says that all ocsp servers are runing byt they are not - we also encounter errors:

Revocation information OCSP
OCSP: http://ocsp.int-x3.letsencrypt.org/
Revocation status Validation error
OCSP ERROR: Exception: Read timed out [http://ocsp.int-x3.letsencrypt.org/]

Some browsers reports websites with lets encrypt certificates as unsecure with this error:

Site not secure
The following problem(s) were found:
(1) Unable to verify the website's identity (OCSP error)
(2) Online certificate validation (OCSP) for an element in the page failed

6

All working for me.
Tested all OSCPs.
Perhaps a browser problem ?
What browser did you use to test ?

Rgds.

7

I saw that error in older Opera 12.18. It seems to be strange that older browser is more sensitive than e.g. Chrome which does not report anything about unavailable OSCPs. Error still persists in Opera and also in SSL LAB - check the latest result (I clicked to clear cache) SSL Server Test: community.letsencrypt.org (Powered by Qualys SSL Labs)

SSL Report: community.letsencrypt.org (64.71.168.201)
Revocation status Validation error
OCSP ERROR: Exception: Read timed out [http://ocsp.int-x3.letsencrypt.org/]

8

Yes we received same issue.

There are any news about ?

9

I see that,
but using firefox latest with active OSCP validation it works.
I’m located in europe.
Perhaps a routing (BGP) issue ?

10

This error is a result of an ongoing service disruption. Please follow status.letsencrypt.org for more information. We should have all of the remaining issues resolved shortly.

In the meantime I’m going to lock this thread since there isn’t a need for further discussion on this particular error. Please open a new thread if you need to resume discussion.

Thanks for your patience, we apologize for the disruption and I expect more detailed root cause information will be shared in the near future.