CERN Accelerating science

CERN CA Certificate Revocation List not being updated

 
Date & time of incident: 
Wednesday, January 16, 2013 - 08:00
Incident Description: 

After the CERN Certification Authority web site update last Tuesday 15/01, permissions on the shared folder containing the CRL (Certificate Revocation List) files were set incorrectly. For this reason, updated CRLs could not be published to the web site. The CRL never expired, but was not updated until Saturday 19 January.

The problem has been understood and fixed on Saturday 19/01. Alerts are being set up to detect the issue early if this should happen again.

Service Element Affected: 
Certificate Authority Service
Impact: 
Service is degraded
Status: 
Resolved
Resolution date: 
Sat, Jan 19, 14:00
Expected resolution or Next Update Time: 
Saturday, January 19, 2013 - 14:00
Posted by: 
IT-OIS
Unit responsible for resolution: 
IT Department