mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-11 22:30:44 +01:00
bogous ocsp response not updated #509
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @bjacke on GitHub (Dec 3, 2020).
currently letsencrypt has an issue to deliver the correct oscp response after a certificate was issued. dehydrated returns in such cases:
OCSP single response: Certificate ID does not match any certificate or issuer.
if you run dehydrated after that again it does not see, that the ocsp resonse is invalid and should be updated:
It shoud see that the ocsp response does not match the current certificate and try to fetch a valid resonse instead.
@bjacke commented on GitHub (Dec 10, 2020):
sorry, it turned out that this was a haproxy ocsp problem here, dehydrated is actually doing everything right here and checks that the ocsp response is the right one.