Re: OCSP_check_validity() status expired

2014-12-28 Thread khav
I confirm that the issue is resolved and what indeed the time.It was not properly sync Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255769,255813#msg-255813 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/ng

Re: OCSP_check_validity() status expired

2014-12-26 Thread Maxim Dounin
Hello! On Fri, Dec 26, 2014 at 10:04:27AM -0500, khav wrote: > the "date" command give the following on my server so i think the date is ok > (correct me if i am wrong) > > Fri Dec 26 14:58:27 MST 2014 > > In php.ini > date.timezone = "US/Mountain" > > [root@sv1 ~]# cat /etc/sysconfig/clock >

Re: OCSP_check_validity() status expired

2014-12-26 Thread khav
the "date" command give the following on my server so i think the date is ok (correct me if i am wrong) Fri Dec 26 14:58:27 MST 2014 In php.ini date.timezone = "US/Mountain" [root@sv1 ~]# cat /etc/sysconfig/clock ZONE="US/Mountain" Posted at Nginx Forum: http://forum.nginx.org/read.php?2,25576

Re: OCSP_check_validity() status expired

2014-12-26 Thread khav
@ionsec These lines are already in my config but i add the "valid=300s" to the resolver line @Maxim how can i fix it Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255769,255802#msg-255802 ___ nginx mailing list nginx@nginx.org http://mail

Re: OCSP_check_validity() status expired

2014-12-24 Thread Maxim Dounin
Hello! On Wed, Dec 24, 2014 at 06:48:00AM -0500, khav wrote: > I am seeing a lot of these errors in my /var/log/nginx/error.log > > [error] 11405#0: OCSP_check_validity() failed (SSL: error:2707307D:OCSP > routines:OCSP_check_validity:status expired) while requesting certificate > status, respo

Re: OCSP_check_validity() status expired

2014-12-24 Thread ionsec
hi khav, try adding the following lines to your nginx website configuration file: ssl_stapling on; ssl_stapling_verify on; ssl_trusted_certificate /etc/nginx/my_ssl_certs/ca-bundle.pem; # # note the PEM encoded X509 ca-bundle file should contain the ssl certificate # chain

OCSP_check_validity() status expired

2014-12-24 Thread khav
I am seeing a lot of these errors in my /var/log/nginx/error.log [error] 11405#0: OCSP_check_validity() failed (SSL: error:2707307D:OCSP routines:OCSP_check_validity:status expired) while requesting certificate status, responder: ocsp2.globalsign.com How can i fix that Posted at Nginx Forum: