I am upgrading haproxy on my servers from 1.8.22 to 2.4.0. I have been
slowly working to fix the messages that I get when I check the config
file. I have one left, but I cannot find any info about how to fix it:
[WARNING] (81457) : Loading: OCSP response status not successful.
Content will be ignored.
If there's any help anyone can offer, I would appreciate it.
I'm using ocsp stapling, and I have a script in cron that once an hour,
for each cert I am using, gets a new .ocsp file with openssl, and using
socat, sends the new ocsp to haproxy. OCSP validity is a lot longer
than one hour, I am just doing it that often in case it breaks for some
reason ... on the next run hopefully it will be working again.
I'm upgrading to get http2 on the back end. Should I be looking at
other things, like multi-threaded operation?
Thanks,
Shawn