When should I use ssl_trusted_certificate when setting up OCSP stapling in nginx?

Question

Nginx

Hello.
My certificate chain has the following structure (a free certificate from startssl.com):
root -> intermediate -> <issued certificate> The ssl_certificate
directive points to a file that contains the issued certificate + intermediate. Do I need to specify something additional in ssl_trusted_certificate in order for OCSP stapling to work?

Answer 1

> free certificate from startssl.com
These are the scammers who were thrown out of trust in Firefox and blocked by Google Chrome? Good certificate, good.
> Do I need to specify something additionally in ssl_trusted_certificate to make OCSP stapling work?
Yes, it is necessary, there must be ssl_trusted_certificate, without it there will be no OCSP.
Stop raping the corpse of startssl scammers, discover the wonderful world of LetsEncrypt certificates and live happily ever after.