TLS certificate of {server_name} could not be definitively verified via OCSP

[rsosag]

Hi Community,

We have a Rails app on Heroku connected to Atlas MongoDB.

Since yesterday, we have started receiving warnings like the following:

MONGODB | TLS certificate of '{server_url}' could not be definitively verified via OCSP: For responders '{cert_issuer_url}' with a timeout of 9.925218007003423 seconds: OCSP response from '{cert_issuer_url}' is 6: unauthorized

Although the app and the database queries continue to work correctly, we would like to identify the root of the issue.

Do you have any idea how to solve this issue?

Environment:

rails (7.0.8.7)
ruby 3.2.8
mongo (2.21.0)

[jamis]

@rsosag Thanks for reporting this. I'm sending you an email asking for more information so we can investigate further.

[jamis]

I'm posting a public update here. @rsosag I apologize for how long this has taken, but I think I've found the problem and have got a patch pending review. (PR here: #2944). I'm hopeful this will fix the issue.

[rsosag]

Hi Jamis, Thank you very much for the review and the proposed fix. El mié, 6 ago 2025 a las 12:08, Jamis Buck ***@***.***>) escribió:

…

I'm posting a public update here. @rsosag <https://github.com/rsosag> I apologize for how long this has taken, but I think I've found the problem and have got a patch pending review. (PR here: #2944 <#2944>). I'm hopeful this will fix the issue. — Reply to this email directly, view it on GitHub <#2940 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACSUTP3FJDSINMG26ZDVUED3MIK75AVCNFSM6AAAAACBV6N2UCVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTIMBSGIYTOMY> . You are receiving this because you were mentioned.Message ID: ***@***.*** com>

[jamis]

The fix has been released in versions 2.21.3 and 2.20.2. When you can, please install one of those and let me know if you continue to see the OCSP warnings.

[rsosag]

@jamis it works!! 💯