topic Re: SSLMGR-cert-ocsp-verify-failed error in General Topics

SSLMGR-cert-ocsp-verify-failed error

MelLi — Sun, 22 Mar 2015 23:30:22 GMT

Hi Guys,

My client has configured LSVPN. The tunnel is up, but he is getting the sslmgr-cert-ocsp-verify-failed error message.

It said SSLMGR certificate ocsp verification failed. Certificate xx status is unavailable.

Has anyone experienced the same issue before, how can we fix this?

We configured the LSVPN ans OCSP respond according to the below documents:

Controlling LSVPN Satellite Connections with OCSP

How to Configure an OCSP Responder

Thanks in advance,

Cheers,

Mel

Re: SSLMGR-cert-ocsp-verify-failed error

hshah — Mon, 23 Mar 2015 17:58:38 GMT

Hi Mel Li,

OCSP is query/response protocol. Did you confirm firewall can reach OCSP server without issue.

I would suggest to do packet capture to verify the same.

Regards,

Hardik Shah

Re: SSLMGR-cert-ocsp-verify-failed error

MelLi — Tue, 24 Mar 2015 01:12:16 GMT

Hi Hardik,

We were testing in the lab environment, where both firewalls are directly connected to the server.

Is there any document we can follow to further troubleshoot this. I do have a doc file recording our settings for the OCSP, do you think I can send it to you and you can help us to verify the settings are 100% correct?

Thanks,

Cheers,

Mel

Re: SSLMGR-cert-ocsp-verify-failed error

MelLi — Tue, 07 Apr 2015 02:19:04 GMT

Hi Hardik,

Do you have any suggestions for this OCSP error we are having?

Thanks,

Cheers,

Mel