Hi, I'm looking to set up OCSP stapling with my nginx server on letsencrypt. I was wondering whether to use the self-signed or cross-signed root CA certificate for the ssl_trusted_certificate directive. Thanks.

What version of nginx? If it's recent enough you don't need that directive, just use ssl_stapling_verify on;

OCSP Stapling: Self-signed or cross signed root CA?

RFL890 April 5, 2022, 11:00pm 3

Thanks, this worked

2 Likes

Topic		Replies	Views
Will/does the letsencrypt client create a cert chain usable with OCSP stapling? Server	18	25681	January 14, 2016
Howto: OCSP Stapling for NGINX Server	8	39085	May 3, 2016
OCSP stapling for nginx (dual certificates) Help	11	3719	April 17, 2020
ECC OCSP nginx.conf ssl_stapling ignored Help	3	1768	April 13, 2021
Observation and Question about "--must-staple" and nginx's "ssl_trusted_certificate" r.h.s. value Server	15	6222	March 15, 2018