Howto: OCSP Stapling for NGINX

[Lulu]

@ShotaMegre

As far, as I read the community forums, there is no need to add this line as fullchain.pem already includes ca-certificate.pem part.

You need fullchain.pem for trust chain of the browser, while ssl_trusted_certificate is mandatory for OCSP. Add it and check if OCSP is working, you may not get immediate response, so you have to nginx "prime" it first, but it should be working for all subsequent requests