Actions
Bug #16195
closed
Remove deprecated OCSP stapling functionality
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Affected Version:
All
Affected Plus Version:
25.07
Affected Architecture:
All
Description
Please remove the ui elements and variable handling code for ocsp must-staple in the pfsense acme package.
Including the ocsp must-staple value to "true" causes a fatal error in obtaining / renewing a certificate.
https://letsencrypt.org/2024/12/05/ending-ocsp/
May 7, 2025
Prior to this date we will have added CRL URLs to certificates
On this date we will drop OCSP URLs from certificates
On this date all requests including the OCSP Must Staple extension will fail
Updated by
Actions