OCSP Stapling



I receive the following error from my nginx:

OCSP_basic_verify() failed (SSL: error:27069076:OCSP routines:OCSP_basic_verify:signer certificate not found) while requesting certificate status, responder: ocsp.cloudflare.com, peer:, certificate: DOMAIN

OCSP Stapling (nginx.conf)

ssl_stapling on;
ssl_stapling_verify on;
resolver valid=60s;
resolver_timeout 2s;

Cloudflare settings

In Cloudflare i have enabled => Full (strict).

Nginx (vhost)

ssl_certificate /etc/nginx/ssl/DOMAIN.crt;
ssl_certificate_key /etc/nginx/ssl/DOMAIN.key;

I can access the website without any problems and do not get an error message in my browser.
But how can I set up the OSCP verification to work?

PS. Use Cloudflare Free.

Thanks in advance

This topic was automatically closed after 30 days. New replies are no longer allowed.