ocsp-stapling through http proxy?

rainer at ultra-secure.de rainer at ultra-secure.de
Thu Oct 13 12:22:58 UTC 2016


Am 2016-10-13 13:16, schrieb Reinis Rozitis:
>> It would be cool if nginx would be able to do the stapling through a 
>> http-
>> proxy.
> 
> Technically you could just "override" (via /etc/hosts or if you have
> your own dns service) your ssl's provider ocsp ip to your own proxy
> which will forward then the requests to the original server.


You mean a transparent proxy?
In our case, this is not possible.



More information about the nginx mailing list