Apr 18, 16:00 PDT
Snowflake Engineering worked with the Microsoft Azure and AWS team to resolve all OCSP related issues. All Snowflake services are healthy.
We will post a preliminary Root Cause Analysis report within the next 48 business hours and follow up with a detailed RCA.
We apologize for the inconvenience. If you have any questions or see any related issues, please send feedback to firstname.lastname@example.org
or submit a support request ticket via the Snowflake Lodge Portal.
Apr 17, 15:22 PDT
Snowflake Services on All AWS Regions are healthy,
For Azure deployments, As of 13:18 PDT, the Microsoft Azure team is rolling out the updated certificates for OCSP. We will provide an update as soon as we know more.
Apr 17, 13:39 PDT
The issue with OCSP failures issue has been resolved for all AWS platforms. The fix for Azure platform is still being rolled out.
We are continuing to monitor the rollout of the fix.
A minor task before you re-run the jobs: Please clear the old cache using the following commands:
Linux - "rm ~/.cache/snowflake/ocsp_response_cache.json"
Mac - "rm ~/Library/Caches/Snowflake/ocsp_response_cache.json"
Apr 17, 11:44 PDT
We received the following update from Amazon AWS with more details on the OCSP issue:
Strict OCSP checking error rates on TLS connections
Customers who opt-in to use strict OCSP checking as part of establishing a TLS connection with Amazon S3 are experiencing a high error rate. We have identified the root cause as an expired intermediate certificate owned by DigiCert and are working with DigiCert to remediate the issue. While we work to resolve the issue, we recommend that customers disable strict OCSP checking in their client. If needed, customers may have to restart clients to eliminate previously cached responses. Requests made to Amazon S3 using TLS by default are operating normally.
For more details: - https://status.aws.amazon.com
We will send an update as soon as we have more information.
Apr 17, 09:49 PDT
Amazon AWS isolated the OCSP issue and are looking to have this resolved in about 90 minutes (will update you if this changes).
Please see the previous update for workaround.
Apr 17, 08:35 PDT
We are continuing to investigate this issue.
Apr 17, 07:45 PDT
We are currently investigating a problem with OCSP failures when connecting to Snowflake. We are assessing the impact and taking the necessary steps to address the problem.
As a workaround, please disable the OCSP verification for our connectors as described in the link:https://community.snowflake.com/s/article/How-to-turn-off-OCSP-checking-in-Snowflake-client-drivers
Note: This step will require the following additional step:
Downgrade SnowSQL to 1.1.76 and Python to 1.7.8
We will post an update as soon as we have more details.
Apr 17, 07:28 PDT