We got alerted by Cisco about this. Dear Cloud Web Security Customer,
We would like to make you aware of a reported issue against GlobalSign certificates. >From their web site: https://www.globalsign.com/en/status/ 13th October 11:00am- present BST 13th October 06:00am- present EST We are currently experiencing a known issue which is causing certificate revocation/error messages to be displayed within some of our certificates. We ask all customers to please follow the instructions in this support article to clear their cache. Please consider the workaround provided by GlobalSign linked here: https://support.globalsign.com/customer/portal/articles/1353318-view-and-or-delete-crl-ocsp-cache Customers may experience web pages that produce a web security certificate error with details mentioning that there is a revoked certificate. Should you have any questions to the above, please contact your local Cloud Web Security Support Team. Best Regards, Product Support Cloud Web Security Thanks, Bobin Joseph -----Original Message----- From: Outages [mailto:outages-boun...@outages.org] On Behalf Of Robert L Mathews via Outages Sent: Thursday, October 13, 2016 9:17 AM To: outages@outages.org Subject: [outages] GlobalSign SSL certificate incorrectly showing "revoked" GlobalSign is a widely used SSL certificate provider. Somehow, their OCSP server this morning falsely announced that one of their root or intermediate certificates has been revoked, causing all https connections to any site using GlobalSign certificates to show an error like this: "You cannot visit www.example.com right now because this certificate has been revoked." This error cannot be bypassed in most web browsers, so any SSL site using a GlobalSign certificate is effectively offline. https://twitter.com/globalsign/status/786505261842247680 https://www.globalsign.com/en/status/ -- Robert L Mathews, Tiger Technologies, http://www.tigertech.net/ _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
