I have a question regarding the "ssl_stapling_verify" function. I hope there are some people here that can help me.
The function is documented as :
"Enables or disables verification of OCSP responses by the server.
For verification to work, the certificate of the server certificate issuer, the root certificate, and all intermediate certificates should be configured as trusted using the ssl_trusted_certificate directive."
I'am wondering
* What constitutes a valid/invalid response by the definition of nginx.
* What action would nginx take if the response is invalid.
The function is documented as :
"Enables or disables verification of OCSP responses by the server.
For verification to work, the certificate of the server certificate issuer, the root certificate, and all intermediate certificates should be configured as trusted using the ssl_trusted_certificate directive."
I'am wondering
* What constitutes a valid/invalid response by the definition of nginx.
* What action would nginx take if the response is invalid.