Error : OCSP check for server certificate failed due to error: "invalid-response"
An error occurred while checking revocation status of the certificate. Contact the administrator for further assistance.
The Certification Authority's OCSP server is failing to respond. In the example below, Qualys SSL Labs shows that the OCSP service at http://ocsp.comodoca.com is failing:
Check for any OCSP service issues with the relevant Certification Authority.
If the Certification Authority is experiencing degradation to their OCSP service, the only workaround is to delete the OCSP configuration in ProxySG.
Depending on the number of sites affected, you may be able to create a policy to workaround the issue but this would be very difficult to manage.
Subscribing will provide email updates when this Article is updated. Login is required.