OCSP_check_validity() status expired

[ionsec]

hi khav,

try adding the following lines to your nginx website configuration file:

        ssl_stapling on;
        ssl_stapling_verify on;
        ssl_trusted_certificate /etc/nginx/my_ssl_certs/ca-bundle.pem;
#
# note the PEM encoded X509 ca-bundle file should contain the ssl
certificate
# chain bundle (i.e. domain and intermediate CA certs)
#
        resolver 8.8.8.8 8.8.4.4 valid=300s;
        resolver_timeout 5s;

wbr,

ionsec

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255769,255770#msg-255770