LetsEncrypt drops OCSP support - required config changes?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
- To: users@xxxxxxxxxxxxxxxx
- Subject: LetsEncrypt drops OCSP support - required config changes?
- From: Torge Riedel <torgeriedel@xxxxxxxxxxxxxxxxxx>
- Date: Thu, 1 May 2025 15:54:42 +0200
- Reply-to: users@xxxxxxxxxxxxxxxx
- Ui-outboundreport: notjunk:1;M01:P0:vXe5ROguVXQ=;rhfifKnaAEhhZRbF3Xc+84AIQ1b EGA7Ekj3FD9gWqx7UYz6CwdLCDbD54yx7CpXJxftZfP1hMOXjukYkwigxCenMUVMwSoW4+DpH 1ysUP78PF7zd5WyDRqr0KAfpeSFIystL2AH16dbjFMCNtcm4ebhgzYa+0Eig9m2I65KAzQlaq vF4Mf78JWBJjsPNd+wAkJlPvsIl64e22DriMWzisumTcnTY8j+AjLS/mevJmQfYOdmMiZv2j4 n+XLvE59gSJ2NNYnLIrZb2Ly0/RbqPq5Uy34AOTunW4tawMrQxGrrNazsImWpzZESaolHuwn8 agbmbQ3YQ5JBgncWPSwzvfR+mIAy3gSu7w2nCTcE1+qRFPH+VCEP/4/owHdeuXq7UF2Pnspd5 FvF/lpmhje5GQfLgkGeCh37X8ZmbVkKh1Up8WwuLAfOFf3z8DzAT2R0kVmc+EUClb35lfSnoK mwfo7Bo+/W8jmgAy2/QIGinLhdozAj/NO43H8T9QBvrBtw3r5xmBoVJxg3wIYgMO42tI9rayi xuNOBhEe5puiYmJKFNIYWexernaN3BmLhXZwyBjxkZr9hzlRSwdUoKbkqTDVwvWN96btap/H1 7xuATDcUNQMpvNF0gTS99EZpCw7tfGYVMssk7N1hUDV8FWRpJKxELiNfEAM7Yjdt6Lc9N22Rv 7NCMvh5S2pV7J3+/YcfPtl76AcB+RcwIklgYYmpn9owK/cXkthJj+1g535n9Jpc7ZeGkmTZhi jhsynYpe4SF2lZfZVxSossiHI/VQpQ+kvbsVE+ChAarpzRAdK2XqDgzVpJiFau/c2zt8x8XlF xwLjjiJ66Z82UwKD1o7IzRNTUgKHAWR+XZ1zjQ/PS7T2AtV0B+43Naq5nAbeZib1RXhN/fVK9 c8HwSE+Tcp65hcRoIO8ayk39xzyX0j64hVybxw+msd7QdI1DPGObdu0fBOQyXlFj5aSJkv9q9 zTGkDi8oAvWTY8CdAeoOREX7sYzUEXmgHWlM6Ctd6pxA/xxTZDXd00bJWsm2FEu5GwcdrPsF6 cOg2zfscNDbTULbPn26oGQ9CSp3rjfugIKPzvxmFbM/aEXgeJTZm8MpureztaSwBWFZGasDdb q/tcwSGwUYwyGE1+UFGM7tuq8gh6yZ6OD7j7WCSk6zn6e87EK/fBDWXrqh6Iyq08+v+78/PjT KTUrs3CqJcUkkiP8UnOmV5/Lh/H/vznASnzUWnZEBH5cw4Q8PlktP4Xu00juVozRE79wUTkGS qt0RmXie+JrFbfrQCxvCXBBSSGx/1585GXoNC7kvFnVRfXzNTrFVXT/3fBejIwrPL64YsBrDo JqcqzOC280PP6az7sXhOSwnM13Cm/SPApHz6FB7UL23sX20jZlKnfiCoO9+mA37JPebJ8vKHk 6yqjICJwOWCw2ljIC7uliVb4J10phRCpfIb1YO222RTewandfWt/xcDeCjOVbPJQiwSoCGwjx LCg/1de4KyY/aNUmbmdcR/mEVsMh0GSUSFXt+sllXZOYRgjuvKN6PCU7vVHfGBw79Un6PITYe 56SxY1sgCJ8CafvNZhHRRcQsPcTR/uFPAsvpGM/za6J7bADVdOq2OWyo/4swZp+7Crw9T2hh9 n9kTgnLyk+rkuZuvzPLbVlVWqsGlbs4Z2Ob5juBF940SrxMmJkMtm0ERo4fOsBoqfsjNYkIJH uxepEaMswY82na9jhjjA+BEGk+y3XlofwySdkmoR5f+tUy8lkexQah8V2iljFPW+5Hiac1oUD UDP4YRJD3/cy/Ha+myyeHVbnU5J5OrC9nSMHZmcfL7t54gi8yw0ZXABx/Q7XCHIJfrW92JAl8 35SGb0GrjtgRaMuZYkHDJaa31bLiJR1vAuHYdvPpWUpx/ht9l7/xRRWr08mDxRN94Y/PkdB7p x7L7EobmU39CK9l7AIigI2/JiqvTy78KwI/REvM71mAeLJGZN7uUOQiSWo9dUvI6TIpEzojnh nw1/I4O4HPyRJgUfX/29Wihspgr/f2wem8rilqIsd8dMuFurUhSIxtvdbpWpB0BTBqmaTkw+G WXGErZcoh5bKOF/qTI8J7zz31Wkmlcd3fvk5EEmzOAQpTiDdGgDyulZU8+72fok9eh1yFevi4 SXrRHXdtms4U/tLoWfYuk0pU1N9LC591NgOOAKInvkw415SSujJXYrw6qJqEb/0dMP+A2LK04 XQLc6putBZn/J+LulMSDhxV0wvjVKrQWCqRrco3ZPBrjXztHg3aomplpq3tbo48Vp/mItFpHQ PfWECEs8X97WXHvYswzk8Rx9e2dd2dLbLoDCgh9vWnwy9eRd4CbUmJbrXMlKdhyklpbTCQmvv BAbmlI/AnVpzUqrIz4T/VCx5YbK4+Rky4QbbG8+xSTpGrLNmnI06uZER3nObEMz4ccy2dGfgQ hu3h6ndipOZO4ZT9Lay07eNgUysbRWZtxg4lJbVUkPkE7n4rS64Qo5wIVl2RU2EeitCVIxSfm b9veCZXoAABHjhorOVwL0E9wRd+Re50TyVa4c490QH7EWG87d6lg3umLRKUGXdWNzQwFoa5iQ TwDZbB0t/8vC0tS4FXY9gIu6I5tO4myTCZX+ycdHMdadnAuUhDhJR1juG6fgdsIySsSuIRwTf /OJwveLgG1zuwLSBbT5E5ZySa9SDFZBlAYQYj+CSd0UwF9TrL369SK4NDYMbeynHAll66mHj6 Et4KRC+HAL8b+N1xnKMMRDB7qIh8lRRV5z8C343yIHUJhuTE/h9l7lMLZG30/zqdpsqRV6l+k eH27GNhwq8Og8yRgvQq8cHqRU/UGEjh6B8wTYTm7rWzEYPIYpgDCQLA6rH2IoIkLrEr+BBzKG NEHCbhV6AMhZpI7E6t8yIPcvZQCEggkOiuCQpRkbQYNaJukEk2sXj0EXLhXAR450F/+U/emyv gKApRfQY5FUc4S5dh21vIt4cLRTzCUTqPxUCvMigioCVKv6JEvKEfXRdrbDCI9AZLJnuFE2Sm XGsz2bJuxnF6/v/R3kH5CPdCFs6kyxO0dBhWpTorB92on7OGzq0Wef3FTQ/BLjDjr4f4/0OyM A==
- User-agent: Mozilla Thunderbird
Dears,
I received the info that LetsEncrypt drops support for OCSP of their certificates.
I took a look on my apache2 config and found
SSLUseStapling On
SSLStaplingCache "shmcb:logs/ssl_stapling(32768)"
The docs (https://httpd.apache.org/docs/trunk/mod/mod_ssl.html#sslusestapling) are not fully clear to me, if it makes sense to keep this config / enable OCSP using certs from LetsEncrypt.
Any hint is helpful.
Thanks and kind regards
Torge
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
[Index of Archives]
[Open SSH Users]
[Linux ACPI]
[Linux Kernel]
[Linux Laptop]
[Kernel Newbies]
[Security]
[Netfilter]
[Bugtraq]
[Squid]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Samba]
[Video 4 Linux]
[Device Mapper]