Page MenuHomeDevCentral
Differential D3638

Prune OCSP nginx configuration
AcceptedPublic
Actions

Authored by dereckson on May 20 2025, 21:14.
Tags
None
Referenced Files
F11628934: D3638.id.diff
Wed, Sep 3, 01:32
Unknown Object (File)
Tue, Sep 2, 12:39
Unknown Object (File)
Tue, Sep 2, 00:14
Unknown Object (File)
Mon, Sep 1, 18:03
Unknown Object (File)
Mon, Sep 1, 10:22
Unknown Object (File)
Wed, Aug 27, 16:13
Unknown Object (File)
Tue, Aug 26, 22:05
Unknown Object (File)
Tue, Aug 26, 21:52
View All 96 Files
Subscribers
None

Details

Reviewers
DorianWinty
Maniphest Tasks
T2116: Drop of OCSP Service
Summary

Let's Encrypt drop OCSP support.

See https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls/

Ref T2116.

Test Plan

Deploy to nginx servers

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
nginx-remove-ocsp
Build Status
Buildable 5810
Build 6092: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.May 20 2025, 21:14
dereckson created this revision.
Harbormaster completed remote builds in B5810: Diff 9408.May 20 2025, 21:15
DorianWinty accepted this revision.Jun 10 2025, 19:34
This revision is now accepted and ready to land.Jun 10 2025, 19:34

Revision Contents
Changeset List

PathSize
7 lines
roles/
webserver-core/
nginx/
16 lines
files/
includes/
21 lines
21 lines
utils/

Diff 9408

View Options

Makefile

Loading...
View Options

roles/webserver-core/nginx/config.sls

Loading...
View Options

roles/webserver-core/nginx/files/includes/tls

Loading...
View Options

roles/webserver-core/nginx/files/includes/tls-modern-only

Loading...
View Options

utils/generate-ocsp-bundle.sh

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator