Drop of OCSP Service
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	DorianWinty
	May 20 2025, 20:13

Description

Let's Encrypt END of OCSP :

  - January 30, 2025

OCSP Must-Staple requests will fail, unless the requesting account has previously issued a certificate containing the OCSP Must Staple extension


  - May 7, 2025

Prior to this date we will have added CRL URLs to certificates
On this date we will drop OCSP URLs from certificates
On this date all requests including the OCSP Must Staple extension will fail

  - August 6, 2025

On this date we will turn off our OCSP responders

Revisions and Commits

rOPS Nasqueron Operations
	D3638	rOPSac58e606182d Prune OCSP nginx configuration

Related Objects

Mentioned In: D3637: Switch from certificates bundle to chain for nginx OCSP

Event Timeline

DorianWinty triaged this task as High priority.May 20 2025, 20:13

DorianWinty created this task.

dereckson mentioned this in D3637: Switch from certificates bundle to chain for nginx OCSP.May 20 2025, 20:57

dereckson merged a task: T2114: Improve nginx SSL stapling configuration.

dereckson added a subscriber: dereckson.

dereckson added a project: Servers.May 20 2025, 21:01

dereckson added a revision: D3638: Prune OCSP nginx configuration.May 20 2025, 21:14

dereckson added a commit: rOPSac58e606182d: Prune OCSP nginx configuration.Wed, Sep 10, 18:59

Applied to Hervil, was missing there.

Complector

$ salt hervil state.apply roles/webserver-core/nginx/config                             
[...]
Summary for hervil
------------
Succeeded: 7 (changed=1)
Failed:    0
------------
Total states run:     7
Total run time:   3.189 s

dereckson closed this task as Resolved.Wed, Sep 10, 19:01

dereckson claimed this task.

Drop of OCSP ServiceClosed, ResolvedPublicActions

Description

Revisions and Commits

Related Objects

Event Timeline

Drop of OCSP Service
Closed, ResolvedPublic
Actions