Project

General

Profile

Bug #6020

OSCP stapling misconfiguration

Added by Jose Luis Duran about 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Normal
Category:
Web Interface
Target version:
Start date:
03/22/2016
Due date:
% Done:

0%

Estimated time:
Affected Version:
2.3
Affected Architecture:
All

Description

Reviewing /var/log/nginx-error.log I found the following message:

"ssl_stapling" ignored, no OCSP responder URL in the certificate

This is because there is no ssl_trusted_certificate directive in the nginx configuration and it has the ssl_stapling_verify on.

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling_verify
http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_trusted_certificate

Associated revisions

Revision af85fb0c (diff)
Added by Chris Buechler about 3 years ago

Remove ssl_stapling. Ticket #6020

History

#1 Updated by Chris Buechler about 3 years ago

  • Status changed from New to Resolved
  • Assignee set to Chris Buechler

that's more relevant for public web servers (which is where that got copy/pasted from), removed.

#2 Updated by Jose Luis Duran about 3 years ago

Thank you!

Also available in: Atom PDF