Personal tools
You are here: Home → Web → Reverse Proxy And Cache → Nginx OCSP Error messages
 

Nginx OCSP Error messages

Common Nginx OCSP (Online Certificate Stapling Protocol) errors.

Resolver

gv.symcd.com could not be resolved (110: Operation timed out) while requesting certificate status, responder: gv.symcd.com
Resolution: Set the 'resolver' in '/etc/nginx/nginx.conf' http section: 
http {
  resolver a.b.c.d valid=300s;
}

No ssl trusted certificate store

 

OCSP_basic_verify() failed (SSL: error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:Verify error:unable to get local issuer certificate) while requesting certificate status, responder: gv.symc

Resolution: Add a ssl_trusted_certificate directive to the nginx configuration.

http {
  ssl_trusted_certificate /etc/nginx/stapling.trusted.crt;
}

Missing certificate

 

OCSP_basic_verify() failed (SSL: error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:Verify error:unable to get issuer certificate) while requesting certificate status, responder: gv.symcd.com
Document Actions