mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-13 15:13:33 +01:00
cert deployment should not be finished if ocsp fetch failed with must_staple enabled #513
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @bjacke on GitHub (Dec 4, 2020).
This requirest is related to issue #785 but it's not the same.
If OCSP_MUST_STAPLE is enabled and if the initial ocsp fetch (after a a fresh new cert was issued) was not successful, then dehydrated should continue trying to fetch a valid and matching ocsp response. I saw recently that it took 30min till the ocsp server had the ocsp status for a new cert. Only if the initial ocsp fetching could be done successfully, the cert deployment should continue.