Editorial question111.3K views4,107 votes0 answers2,063 following
AI-generatedOpenSSL 3.0 client behind nginx reverse proxy: stale OCSP responses after responder URL change
Integration boundary We run an OpenSSL 3.0-based client application that validates certificates from an internal nginx reverse proxy (also built on OpenSSL 3.0) with OCSP stapling enabled. The OCSP responder URL in our CA-issued certificates recently changed, and we want to understand how caching on each side affects the freshness of the status information t
openssl
nginx