Re: [users@httpd] ssl stapling error - sectigo

2019-04-25 Thread Stefan Eissing
There might come up an opportunity in the near future to give Apache an alternate OCSP stapling implementation. Alternate, as it is needed for the 2.4.x line. For backward compatibility reasons, switching strategies must be an opt-in by the user. I will announce here and on the dev list if/when

Re: [users@httpd] ssl stapling error - sectigo

2019-04-25 Thread Hajo Locke
Hello, thanks to Tom, who informed me offlist about this. It seems that problem was triggered by some kind of maintenance. https://sectigo.status.io/pages/history/5938a0dbef3e6af26b001921# Currently it is working again for us. Such unexpected problems with ocsp-urls are really annying for

Re: [users@httpd] ssl stapling error - sectigo

2019-04-25 Thread Hajo Locke
Hello, Am 25.04.2019 um 09:51 schrieb Stefan Eissing: Am 24.04.2019 um 16:22 schrieb Hajo Locke : Hello List, Apache is 2.4.39, System is Ubuntu 18.04 and 16.04 since yesterday evening we have massive mod_ssl problems with ssl stapling: Apr 24 11:20:59 myhostname apache2[16094]:

Re: [users@httpd] ssl stapling error - sectigo

2019-04-25 Thread Stefan Eissing
> Am 24.04.2019 um 16:22 schrieb Hajo Locke : > > Hello List, > > Apache is 2.4.39, System is Ubuntu 18.04 and 16.04 > > since yesterday evening we have massive mod_ssl problems with ssl stapling: > > Apr 24 11:20:59 myhostname apache2[16094]: [ssl:error] [pid 16094] > AH01941:

[users@httpd] ssl stapling error - sectigo

2019-04-24 Thread Hajo Locke
Hello List, Apache is 2.4.39, System is Ubuntu 18.04 and 16.04 since yesterday evening we have massive mod_ssl problems with ssl stapling: Apr 24 11:20:59 myhostname apache2[16094]: [ssl:error] [pid 16094] AH01941: stapling_renew_response: responder error We had complaints about slow