Forum Discussion
pablitop_134672
Nimbostratus
NimbostratusProblem with ocsp stapling
I keep getting the error below and there is no way I can solve it. I follow the guide that support sent me ( https://support.f5.com/csp/article/K17111035), but no luck either. Any clue?
Jun 2 1...
Kevin_Stewart
Employee
EmployeeA 503 error in OCSP stapling usually means that the F5 is having trouble reaching the OCSP responder. Review your OCSP responder config and make sure that it's pointing to the correct address (and port), or is correctly configured to access OCSP through a proxy server.
OCSP traffic isn't encrypted, so you should be able to tcpdump capture on the respective VLAN and watch this traffic.
tcpdump -lnni [OCSP-connected vlan] -Xs0 port 80
The -Xs0 flag will let you see what the HTTP requests and responses look like, and it's probably a good assumption that the 503 is coming from the direction of the OCSP responder.
