Re: How to enable OCSP stapling when default server is self-signed?

Maxim Dounin Wrote: --- > Hello! > > On Sun, Apr 05, 2015 at 11:26:19PM -0400, bughunter wrote: > > > My web server is intentionally set up to only support virtual hosts > and TLS > > SNI. I know that the latter eliminates some ancient web brow

Re: SSL cert issues with mobile devices

Thank you Xin! I appended gdig2.crt to my domain's certificate, and commented out the ssl_trusted_certificate and the ssl_stapling directives, and it did the trick. Many thanks, Igal Sapir Lucee Core Developer Lucee.org On 4/6/2015 12:32 PM, Xin Li wrote: > On 04/06/15 12:

Re: SSL cert issues with mobile devices

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04/06/15 12:23, Igal @ Lucee.org wrote: > I have an issue with my SSL certificate on some mobile devices, > e.g. Safari on iPhone and Firefox on Android. Everything seems to > be fine with desktop browsers as well as some mobile browsers > (works

SSL cert issues with mobile devices

I have an issue with my SSL certificate on some mobile devices, e.g. Safari on iPhone and Firefox on Android. Everything seems to be fine with desktop browsers as well as some mobile browsers (works fine on Chrome on Android). According to ssllabs.com the issue is with the Certificate Chain and/

Re: How to enable OCSP stapling when default server is self-signed?

Hello! On Sun, Apr 05, 2015 at 11:26:19PM -0400, bughunter wrote: > My web server is intentionally set up to only support virtual hosts and TLS > SNI. I know that the latter eliminates some ancient web browsers but I > don't care about those browsers. > > I want to enable OCSP stapling and it s