OCSP_check_validity() status expired

Maxim Dounin mdounin at mdounin.ru
Wed Dec 24 13:05:48 UTC 2014


On Wed, Dec 24, 2014 at 06:48:00AM -0500, khav wrote:

> I am seeing a lot of these errors in my /var/log/nginx/error.log
>  [error] 11405#0: OCSP_check_validity() failed (SSL: error:2707307D:OCSP
> routines:OCSP_check_validity:status expired) while requesting certificate
> status, responder: ocsp2.globalsign.com
> How can i fix that

The OCSP response returned by your CA is too old.  Most likely, 
the problem is that time on your server is set incorrectly.

Maxim Dounin

More information about the nginx mailing list