SSLMGR-cert-ocsp-verify-failed error

[MelLi]

Hi Guys,

My client has configured LSVPN. The tunnel is up, but he is getting the sslmgr-cert-ocsp-verify-failed error message.

It said SSLMGR certificate ocsp verification failed. Certificate xx status is unavailable.

Has anyone experienced the same issue before, how can we fix this?

We configured the LSVPN ans OCSP respond according to the below documents:

Controlling LSVPN Satellite Connections with OCSP

How to Configure an OCSP Responder

Thanks in advance,

Cheers,

Mel

[hshah]

Hi Mel Li,

OCSP is query/response protocol. Did you confirm firewall can reach OCSP server without issue.

I would suggest to do packet capture to verify the same.

Regards,

Hardik Shah

[MelLi]

Hi Hardik,

We were testing in the lab environment, where both firewalls are directly connected to the server.

Is there any document we can follow to further troubleshoot this. I do have a doc file recording our settings for the OCSP, do you think I can send it to you and you can help us to verify the settings are 100% correct?

Thanks,

Cheers,

Mel

[MelLi]

Hi Hardik,

Do you have any suggestions for this OCSP error we are having?

Thanks,

Cheers,

Mel