Re: OCSP stapling and resolver

2017-09-27 Thread Maxim Dounin
Hello! On Tue, Sep 26, 2017 at 05:24:26PM +0200, Grzegorz Kulewski wrote: > W dniu 26.09.2017 15:20, Maxim Dounin pisze: > > Hello! > > > > On Tue, Sep 26, 2017 at 03:48:57AM +0200, Grzegorz Kulewski > > wrote: > > > >> Is resolver in nginx still needed for OCSP stapling? > > > > Yes. > > >

Re: OCSP stapling and resolver

2017-09-26 Thread Grzegorz Kulewski
W dniu 26.09.2017 15:20, Maxim Dounin pisze: > Hello! > > On Tue, Sep 26, 2017 at 03:48:57AM +0200, Grzegorz Kulewski wrote: > >> Is resolver in nginx still needed for OCSP stapling? > > Yes. > >> I am getting a warning from nginx if resolver is not supplied >> but at the same time both Qualys

Re: OCSP stapling and resolver

2017-09-26 Thread Maxim Dounin
Hello! On Tue, Sep 26, 2017 at 03:48:57AM +0200, Grzegorz Kulewski wrote: > Is resolver in nginx still needed for OCSP stapling? Yes. > I am getting a warning from nginx if resolver is not supplied > but at the same time both Qualys and openssl s_client output > suggest OCSP stapling is worki

Re: OCSP stapling and resolver

2017-09-26 Thread A. Schulze
Grzegorz Kulewski: Hello, Is resolver in nginx still needed for OCSP stapling? I am getting a warning from nginx if resolver is not supplied but at the same time both Qualys and openssl s_client output suggest OCSP stapling is working. Strange There are two options - let nginx fetch th

OCSP stapling and resolver

2017-09-25 Thread Grzegorz Kulewski
Hello, Is resolver in nginx still needed for OCSP stapling? I am getting a warning from nginx if resolver is not supplied but at the same time both Qualys and openssl s_client output suggest OCSP stapling is working. Strange. -- Grzegorz Kulewski g...@leniwiec.biz +48 663 92 88 95 ___