Project

General

Profile

Actions

Bug #6020

closed

OSCP stapling misconfiguration

Added by Jose Luis Duran over 8 years ago. Updated over 8 years ago.

Status:
Resolved
Priority:
Normal
Category:
Web Interface
Target version:
Start date:
03/22/2016
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.3
Affected Architecture:
All

Description

Reviewing /var/log/nginx-error.log I found the following message:

"ssl_stapling" ignored, no OCSP responder URL in the certificate

This is because there is no ssl_trusted_certificate directive in the nginx configuration and it has the ssl_stapling_verify on.

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling_verify
http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_trusted_certificate

Actions

Also available in: Atom PDF