DNS Certification Authority Authorization (CAA) Policy / DNSSEC for whonix.org / ssllabs.com test results / OCSP ERROR: Exception: connect timed out [http://r3.o.lencr.org] / Must-Staple

[Patrick]

OCSP deprecated upstream:

Ending OCSP Support in 2025

Therefore disabled:

Certificate verification failed: The certificate is NOT trusted. The revocation or OCSP data are old and have been superseded. Could not handshake: Error in the certificate verification

Error with apt-get update and Kicksecure APT repository Issue present as of Wed Jun 5 09:00 UTC Err:1 tor+https://deb.kicksecure.com bookworm InRelease Certificate verification failed: The certificate is NOT trusted. The revocation or OCSP data are old and have been superseded. Could not handshake: Error in the certificate verification. [IP: 127.0.0.1 9050] The system time is set correctly with sdwdate.