Answer the question
In order to leave comments, you need to log in
OSCP stapling can't connect. What is the problem?
Good afternoon.
There was a problem with OSCP stapling. I am using a free SSL certificate from wosign.
I am using Bitrix virtual machine. The certificate screwed norms.
I did it as in the manuals ( https://popov.io/2015/07/10/%D0%BA%D0%B0%D0%BA-%D0... , but still when checking the OCSP Staple SSL certificate site: Not Enabled
Also when testing # openssl s_client -connect SITE_URL:443 -tls1 -tlsextdebug -status (removed the link to the site, because I don't want to show it)
Gives:
OCSP response: no response sent
In my configs for the nginx domain cost these settings.
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
ssl_certificate /etc/nginx/ssl/support.webbs.pro/1_support.webbs.pro_bundle.crt;
ssl_certificate_key /etc/nginx/ssl/support.webbs.pro/2_support.webbs.pro.key;
# performance
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;
resolver 8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout 5s;
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/nginx/ssl/support.webbs.pro/ca-certs.pem;
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question