Welcome! Log In Create A New Profile

Advanced

Re: About nginx and OCSP Must-Staple

A. Schulze
February 24, 2022 01:50PM
Am 24.02.22 um 19:06 schrieb wordlesswind via nginx:
> I enabled OCSP Must-Staple, then I found that after restarting nginx, I always get "MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING" error when visiting my website for the first time.

Hi,

this is known behavior (reference welcome). You may configure ssl_stapling_file to serve the OCSP response also for the very first response.
Or write a script that fetch https://example.org immediately after reload.

Andreas
_______________________________________________
nginx mailing list -- nginx@nginx.org
To unsubscribe send an email to nginx-leave@nginx.org
Subject Author Posted

About nginx and OCSP Must-Staple

wordlesswind via nginx February 24, 2022 01:10PM

Re: About nginx and OCSP Must-Staple

A. Schulze February 24, 2022 01:50PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 307
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready