Hi, I am trying to run the command ./testssl.sh 127.0.0.1:443 but it is giving the ocsp should be enabled… All the configurations look fine but not sure why I am getting this.
OCSP stapling not offered
OCSP must staple extension requires OCSP stapling (NOT ok)
DNS CAA RR (experimental) not offered
Can anyone suggest why I am getting this issue.
I dont’t think you’ll get a valid certificate, let alone a valid ocsp staple, if you query 127.0.0.1.
Retry with the fqdn.
Do you want to share your domain name, or what webserver configuration you are using that should be stapling OCSP Responses?
Without that info, we don’t really have anything to go on to help you.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.