SSL stapling OCSP error

[mnordhoff]

@somuch77

Then the cronjob is good choice. If I’m not using cronjob to fetch it earlier, is it possible for my nginx to serve stale OCSP (when there’s no outage on LE server)? will nginx automatically purge OCSP at cache and fetch a new one when it become stale?

Is this ssl_stapling_verify on used to make sure that OCSP on my nginx cache always fresh?

I'm not sure. I'm almost certain Nginx will refresh expired OCSP responses whether or not ssl_stapling_verify is on. It would be really broken and people would complain all the time otherwise.