ocsp-stapling through http proxy?

Reinis Rozitis r at roze.lv
Thu Oct 13 11:16:42 UTC 2016

> It would be cool if nginx would be able to do the stapling through a http-
> proxy.

Technically you could just "override" (via /etc/hosts or if you have your own dns service) your ssl's provider ocsp ip to your own proxy which will forward then the requests to the original server.

p.s. in this case though probably a simple http proxy won't do but tcp should work


More information about the nginx mailing list