GrapheneOS on Nostr: The built-in nginx support for OCSP stapling doesn't have a way to properly save the ...
The built-in nginx support for OCSP stapling doesn't have a way to properly save the last valid result and reuse it but nginx fully supports handling it via an external service. We use
https://github.com/tomwassenberg/certbot-ocsp-fetcher for reliable OCSP stapling and it has always worked very well for us.
Published at
2024-12-12 15:34:56Event JSON
{
"id": "46b246a426ae50a483ec4fd15fd3101be10af850a0aa2ff147977a5d8f228f0a",
"pubkey": "5468bceeb74ce35cb4173dcc9974bddac9e894a74bf3d44f9ca8b7554605c9ed",
"created_at": 1734017696,
"kind": 1,
"tags": [
[
"e",
"2cc6dfe1ba3df5d729d855bdab3e2f02e04a16ab42ca169d81fdda1f739666e4",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://grapheneos.social/users/GrapheneOS/statuses/113640583737930106",
"activitypub"
]
],
"content": "The built-in nginx support for OCSP stapling doesn't have a way to properly save the last valid result and reuse it but nginx fully supports handling it via an external service. We use https://github.com/tomwassenberg/certbot-ocsp-fetcher for reliable OCSP stapling and it has always worked very well for us.",
"sig": "b6ed668b4efd519e50a9d72ef0b3a4ebd99bdfc0b02d0d48b576ef319edd73d717110dd89fb374d2b07a48c8e96325995959d2f28097d29d752c8cb86905f527"
}
