Page MenuHomeDevCentral
Differential D3638

Prune OCSP nginx configuration
AcceptedPublic
Actions

Authored by dereckson on May 20 2025, 21:14.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Jul 1, 10:39
Unknown Object (File)
Sun, Jun 29, 16:27
Unknown Object (File)
Sat, Jun 28, 22:12
Unknown Object (File)
Wed, Jun 25, 16:14
Unknown Object (File)
Tue, Jun 24, 08:05
Unknown Object (File)
Sun, Jun 22, 03:15
Unknown Object (File)
Sun, Jun 22, 02:51
Unknown Object (File)
Sun, Jun 22, 02:27
View All 25 Files
Subscribers
None

Details

Reviewers
DorianWinty
Maniphest Tasks
T2116: Drop of OCSP Service
Summary

Let's Encrypt drop OCSP support.

See https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls/

Ref T2116.

Test Plan

Deploy to nginx servers

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
nginx-remove-ocsp
Build Status
Buildable 5810
Build 6092: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.May 20 2025, 21:14
dereckson created this revision.
Harbormaster completed remote builds in B5810: Diff 9408.May 20 2025, 21:15
DorianWinty accepted this revision.Tue, Jun 10, 19:34
This revision is now accepted and ready to land.Tue, Jun 10, 19:34

Revision Contents
Changeset List

PathSize
7 lines
roles/
webserver-core/
nginx/
16 lines
files/
includes/
21 lines
21 lines
utils/

Diff 9408

View Options

Makefile

Loading...
View Options

roles/webserver-core/nginx/config.sls

Loading...
View Options

roles/webserver-core/nginx/files/includes/tls

Loading...
View Options

roles/webserver-core/nginx/files/includes/tls-modern-only

Loading...
View Options

utils/generate-ocsp-bundle.sh

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator