D4Science Infrastructure

I'm investigating the issue. I do not have a clue yet, the same exact configuration is working on the dev and preproduction instances.

As a temporary workaround, the 'ocsp must staple' check can be disabled on Firefox:

• Write about:config in the URL bar

• search for security.ssl.enable_ocsp_must_staple and set its value to false

It seems a openssl bug. Why it started showing now I've yet to understand. I worked around it for the time being and at the next renewal the certificates on the haproxy nodes will have the must staple flag disabled.