Share via

ocsp.msocsp.com, oneocsp.msocsp.comfailed to resolve ip address.

mohakar_non_prod_adm 0 Reputation points
2025-12-19T05:14:04.8566667+00:00

For APIM Cert validation below domain required as per MS Document but ocsp.msocsp.com, oneocsp.msocsp.comfailed to resolve ip address.

https://learn.microsoft.com/en-us/azure/api-management/virtual-network-reference#tls-functionality TLS functionality

To enable TLS/SSL certificate chain building and validation, the API Management service needs outbound network connectivity on ports 80 and 443 to ocsp.msocsp.com, oneocsp.msocsp.com, mscrl.microsoft.com, crl.microsoft.com, cacerts.digicert.com, crl3.digicert.com and csp.digicert.com.

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Q&A Assist
    2025-12-19T05:14:14.2966667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    If ocsp.msocsp.com and oneocsp.msocsp.com are failing to resolve to an IP address, it could be due to several reasons such as DNS configuration issues, network restrictions, or temporary outages of the domain. To troubleshoot this issue, you can try the following steps:

    1. Check DNS Settings: Ensure that your DNS servers are correctly configured and can resolve external domains. You can use tools like nslookup or dig to check the resolution of these domains.
    2. Network Connectivity: Verify that there are no firewall rules or network policies blocking outbound connections to these domains on ports 80 and 443.
    3. Temporary Issues: Sometimes, the domain may be temporarily down or experiencing issues. You can check the status of the domain using online services that monitor website uptime.
    4. Contact Support: If the issue persists, consider reaching out to Microsoft support for assistance, especially if this is impacting your API Management service functionality.

    It's important to ensure that your API Management service has the necessary outbound connectivity to these domains for TLS/SSL certificate validation as specified in the Microsoft documentation.

    References:

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.