Hacker News Reader

Comment by SysArchitect | Hacker News Reader

This worked for me on OS X:

  sqlite3 ~/Library/Keychains/*/ocspcache.sqlite3 'DELETE FROM ocsp WHERE hex(serialNum) IN ("040000000001444EF03E20", "040000000001444EF04247");'

What a pain in the behind :/

That didn't work for me, but this did:

  sudo rm /var/db/crls/*cache.db

That removes all caches for OCSP. That seems a little heavy handed IMHO.

but if it works.

Interesting, for me it was the opposite. The rm command did not work, but the sqlite3 command did.

Thank you! I tried the rm that GlobalSign recommended to no effect, but your sqlite3 command immediately fixed the problem (on macOS Sierra).

Not helping us that are running >30 sites using globalsign, but I have finished buying RapidSSL for all of them.

Nope :-(

Ouch that sucks.

This did not work for me on macOS Sierra

I am on macOS Sierra...