How to Empty the OCSP Cache on the Security Server?
Security Server's OCSP cache can be emptied manually by following the steps below. By emptying the OCSP cache it is possible to force the Security Server to fetch new OCSP responses right away instead of waiting for the next scheduled interval.
Step-by-step guide
The OCSP cache can be emptied by following the steps below.
$ sudo su -
$ systemctl stop xroad-signer
$ mv /var/cache/xroad/*ocsp /tmp
$ systemctl start xroad-signer
$ exit