SnowPro Advanced Architect

By Snowflake · Question Mode

QuestionQ12

Secure Data Sharing and Consumption

A company that is new to Snowflake can connect to its account with SnowSQL, but it receives the following error message in the connection logs:

SEVERE: WARNING!!! Using fail-open to connect. Driver is connecting to an HTTPS endpoint without OCSP based Certificate Revocation checking as it could not obtain a valid OCSP Response to use from the CA OCSP responder.

What does this message indicate?

Choose two
Explanation

SnowSQL uses fail-open OCSP behavior by default, so it permits the HTTPS connection while logging a warning when a valid certificate-revocation response cannot be obtained. Snowflake sends OCSP certificate checks over port 80; blocking that port can prevent the client from reaching the OCSP responder and produce this warning.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!