chee003 commented on issue #10309:
URL: https://github.com/apache/apisix/issues/10309#issuecomment-1966052907

   > it seem that you don't configure 'ocsp_stapling' field in ssl resource, 
try this:
   > 
   > ```
   > curl http://127.0.0.1:9180/apisix/admin/ssls/<id>
   > -H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -d '
   > {
   >     "ocsp_stapling": {
   >         "enabled": true
   >     }
   > }'
   > ```
   > 
   > and the doc in 
[here](https://apisix.apache.org/docs/apisix/next/plugins/ocsp-stapling/).
   
   i do the post and the error not resolv
   _**echo -n "Q" | openssl s_client -status -connect example.com:9443 
-servername example.com 2>&1 | cat**_
   
   _**2024/02/27 08:42:13 [info] 54#54: *122947 [lua] ocsp-stapling.lua:101: 
set_ocsp_resp(): not ocsp resp cache found, fetch from ocsp responder, context: 
ssl_certificate_by_lua*, client: 10.192.8.136, server: 0.0.0.0:9443
   2024/02/27 08:42:13 [info] 54#54: *122947 [lua] ocsp-stapling.lua:50: 
fetch_ocsp_resp(): fetch ocsp response from remote, context: 
ssl_certificate_by_lua*, client: 10.192.8.136, server: 0.0.0.0:9443
   2024/02/27 08:42:13 [error] 54#54: *122947 [lua] ocsp-stapling.lua:172: 
set_cert_and_key(): no ocsp response send: failed to get ocsp url: no issuer 
certificate in chain, context: ssl_certificate_by_lua*, client: 10.192.8.136, 
server: 0.0.0.0:9443**_
   
   this is my certificate is not correct?
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to