Maniphest T2116

Drop of OCSP Service
Open, HighPublic
Actions

Assigned To

None

Authored By

	DorianWinty
	May 20 2025, 20:13

Tags

Referenced Files

None

Subscribers

Description

Let's Encrypt END of OCSP :

  - January 30, 2025

OCSP Must-Staple requests will fail, unless the requesting account has previously issued a certificate containing the OCSP Must Staple extension


  - May 7, 2025

Prior to this date we will have added CRL URLs to certificates
On this date we will drop OCSP URLs from certificates
On this date all requests including the OCSP Must Staple extension will fail

  - August 6, 2025

On this date we will turn off our OCSP responders

Revisions and Commits

rOPS Nasqueron Operations
	Accepted	D3638 Prune OCSP nginx configuration

Related Objects

Mentioned In: D3637: Switch from certificates bundle to chain for nginx OCSP

Event Timeline

DorianWinty triaged this task as High priority.May 20 2025, 20:13

DorianWinty created this task.

dereckson mentioned this in D3637: Switch from certificates bundle to chain for nginx OCSP.May 20 2025, 20:57

dereckson merged a task: T2114: Improve nginx SSL stapling configuration.

dereckson added a subscriber: dereckson.

dereckson added a project: Servers.May 20 2025, 21:01

dereckson added a revision: D3638: Prune OCSP nginx configuration.May 20 2025, 21:14