Welcome! Log In Create A New Profile

Advanced

Re: nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/path/to/example.com/fullchain.cer"

Maxim Dounin
May 07, 2019 02:04PM
Hello!

On Tue, May 07, 2019 at 01:13:44PM -0400, rihad wrote:

> Эти варны возникли при чтении конфига после обновления до nginx с 1.14.2 до
> 1.16.0 (ОС: FreeBSD 11.2).
> Даунгрейд до 1.14.2 убирает сообщения..
> Используем сертфикаты Let's Encrypt и клиент acme.sh
>
> Конфиг SSL Stapling:
>
> ssl_stapling on;
> ssl_stapling_verify on;
>
> Типичный конфиг домена (коих много):
>
> ssl_certificate /home/acme/.acme.sh/example.com/fullchain.cer;
> ssl_certificate_key /home/acme/.acme.sh/example.com/example.com.key;
>
> Внутри fullchain.cer сидят два сертификата, второй из которых всегда
> одинаков для всех.

Покажите пример fullchain.cer. Кроме того, было бы неплохо
увидеть вывод "nginx -V" для обоих версий, и пример минимального
полного конфига, демонстрирующего проблему.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx-ru mailing list
nginx-ru@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-ru
Subject Author Posted

nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/path/to/example.com/fullchain.cer"

rihad May 07, 2019 01:13PM

Re: nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/path/to/example.com/fullchain.cer"

Maxim Dounin May 07, 2019 02:04PM

Re: nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/path/to/example.com/fullchain.cer"

rihad May 07, 2019 11:53PM

Re: nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/path/to/example.com/fullchain.cer"

rihad May 08, 2019 12:02AM

Re: nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/path/to/example.com/fullchain.cer"

rihad May 08, 2019 12:10AM

Re: nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate "/path/to/example.com/fullchain.cer"

Maxim Dounin May 08, 2019 08:54AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 71
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready