Differing ocsp responses

itpp2012 nginx-forum at forum.nginx.org
Wed Jun 29 16:26:58 UTC 2016


CJ Ess Wrote:
-------------------------------------------------------
> Ok, that explains it then. Does the cache survive reloads? Or does it
> need
> to requery?

See also https://forum.nginx.org/read.php?2,249249,249249#msg-249249

"When Nginx starts for the first time, and there's no cached OCSP response,
the first client to try an OCSP will fail; I understand that this is by
design, and I've overcome it by simply 'warming' the cached manually by
using OpenSSL's s_client... "

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,267945,267953#msg-267953



More information about the nginx mailing list