Hello,

nginx is not updating the OCSP response cache.

openssl says:
[...]
Cert Status: good
This Update: Sep 9 09:59:46 2015 GMT
Next Update: Sep 11 09:59:46 2015 GMT

gnutls says "There is a newer OCSP response but was not provided by the server".

The configuration says:

[...]
ssl_stapling on;
ssl_stapling_verify on;
ssl_stapling_file [...]/ssl/ocsp-response.der;
[...]


How do you enforce automatic update of the OCSP response cache?

Some server's "next update" occurs at a later date than 48h.
How do you enfoce, say, a 6days next update?

Thank you for your time.