Merge pull request #13607 from michel-thomas/nginx-letsencrypt-ocsp-end-support

fix(nginx): `ssl_stapling` should be `off` with Let's Encrypt
This commit is contained in:
Ferdinand Thiessen
2025-09-08 12:45:23 +02:00
committed by GitHub

View File

@@ -17,6 +17,8 @@ NGINX configuration
- Adjust the :code:`ssl_certificate` and :code:`ssl_certificate_key` directives to the real paths for your signed
certificate and private key. Make sure your SSL certificates are readable by the nginx server process (see `nginx HTTPS SSL
Module documentation <https://wiki.nginx.org/HttpSslModule>`_).
- If using Let's Encrypt as TLS certificate and nginx as webserver, set `ssl_stapling` and `ssl_stapling_verify` to `off`
in main nginx config (see [Let's Encrypt blog post](https://letsencrypt.org/2024/12/05/ending-ocsp)).
- Be careful about line breaks if you copy the examples, as long lines may be
broken for page display and result in an invalid configuration files.
- Some environments might need a ``cgi.fix_pathinfo`` set to ``1`` in their