Re: How to check nginx OCSP verification

2016-03-01 Thread A. Schulze
B.R.: I want to have details about the status nginx' validation of the initial OCSP query it did to the OCSP responder of the CA, especially when it goes wrong. we do not let nginx fetch the ocsp data itself but use ssl_stapling_file. a cronjob call openssl and VERIFY the ocsp resonse. O

Re: How to check nginx OCSP verification

2016-03-01 Thread B.R.
I do not want to validate OCSP responses client-side, which are OK. I want to have details about the status nginx' validation of the initial OCSP query it did to the OCSP responder of the CA, especially when it goes wrong. I noted that even though ssl_trusted_certificate is not set or set with a w

Re: How to check nginx OCSP verification

2016-03-01 Thread Alt
Hello, You can check with this command found on this website: https://unmitigatedrisk.com/?p=100 openssl s_client -connect login.live.com:443 -tls1 -tlsextdebug -status If everything goes well, you should find something like: "OCSP response: == OCSP Response

Re: How to check nginx OCSP verification

2016-03-01 Thread Thierry
Title: Re: How to check nginx OCSP verification Hi, have a try :) https://www.ssllabs.com/ssltest/ Thx Le mardi 1 mars 2016 à 15:52:52, vous écriviez : Hello, I want to configure a server with: ssl_stapling on; ssl_stapling_verify on; What should happen if the ssl_trusted_certificate

How to check nginx OCSP verification

2016-03-01 Thread B.R.
Hello, I want to configure a server with: ssl_stapling on; ssl_stapling_verify on; What should happen if the ssl_trusted_certificate is (not|mis)configured? How to check nginx is properly configured and server-side OCSP response verification works? Thanks, --- *B. R.* ___