Forum Discussion

Phong_Tang_7213's avatar
Phong_Tang_7213
Icon for Altostratus rankAltostratus
Jun 06, 2016

APM SSO OCSP Auth agent: Failure status 'Error querying OCSP responsder host (ocsp.viettel-ca.vn) path (/)'

Hi Gurus I am trying to configure SSO and OCSP Auth. But it fail:   2016-06-06 17:34:14 /Common/PL_WEB_CERT_OCSP:Common:aafdaab1: New session from client IP 172.16.69.132 (ST=/CC=/C=) at VI...
application delivery
BIG-IP Access Policy Manager (APM)
  • Danielzi's avatar
    Danielzi
    Jan 29, 2023

    Hi yes i got workaound from the support "https://support.f5.com/csp/article/K12552109"

    i am still waiting for RFE or some EHF becuse i need to create dummy VIP for each issuer and its not should work like this.

    the CRLDP works great only the OCSP with this issue

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 07, 2016

So you're basically getting the same error from the command line, which would indicate an issue with either the request or the OCSP services. Are you certain that http://ocsp.viettel-ca.vn is the correct OCSP responder URL? A simple cURL to that URL intermittently responds with a 200 or 404, so I'm guessing this is not the correct URL or there's something wrong with the service.