Project

General

Profile

Actions
Copy link

Bug #6020

closed

OSCP stapling misconfiguration

Added by Jose Luis Duran about 8 years ago. Updated about 8 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Chris Buechler
Category:
Web Interface
Target version:
2.3
Start date:
03/22/2016
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.3
Affected Architecture:
All

Description

Reviewing /var/log/nginx-error.log I found the following message:

"ssl_stapling" ignored, no OCSP responder URL in the certificate

This is because there is no ssl_trusted_certificate directive in the nginx configuration and it has the ssl_stapling_verify on.

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling_verify
http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_trusted_certificate

Actions
Copy link
 #1

Updated by Chris Buechler about 8 years ago

  • Status changed from New to Resolved
  • Assignee set to Chris Buechler

that's more relevant for public web servers (which is where that got copy/pasted from), removed.

Actions
Copy link
 #2

Updated by Jose Luis Duran about 8 years ago

Thank you!

Actions
Copy link

Also available in: Atom PDF