[ANNOUNCE] Tengine-2.1.1 released

2015-08-23 Thread Yang Tian
Hi folks, We are very excited to announce that Tengine-2.1.1 (stable version) has been released. You can either checkout the source code from GitHub: https://github.com/alibaba/tengine or download the tarball directly: http://tengine.taobao.org/download/tengine-2.1.1.tar.gz

Re: Ocsp stapling

2015-08-23 Thread fsantiago
Update; it all works now. once i enabled ocsp stapling for ALL of my virtual domains, they then all began reporting correct results. - fabe On 2015-08-23 09:55, Fabian Santiago wrote: Thanks. It does. Test produces no results. Not working on ssllabs (no result). I'm clueless. I've seen

Re: Ocsp stapling

2015-08-23 Thread Fabian Santiago
Thanks. It does. Test produces no results. Not working on ssllabs (no result). I'm clueless. I've seen mention out on the web about making sure you define ocsp for the default site or none else will work. I also make use of sni as I only have one ip address. I have no truly "default" site

Re: Ocsp stapling

2015-08-23 Thread biazus
Config files seems to be OK. Just make sure "ssl_trusted_certificate" contais the intermediate & root certificates (in that order from top to bottom). You can test with the following command: echo QUIT | openssl s_client -connect yourhost.com:443 -status 2> /dev/null | grep -A 17 'OCSP response:'