<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[How to disable OCSP stapling?]]></title><description><![CDATA[<p dir="auto">My Cloudron instance keeps crashing and my openid also crashes when trying to login into my apps.</p>
<p dir="auto">nginx: [warn] "ssl_stapling" ignored, no OCSP responder URL in the certificate</p>
<p dir="auto">Any way to fix that?</p>
<p dir="auto">This could be the culprit:</p>
<p dir="auto">This issue is particularly prevalent with certificates issued by Let's Encrypt. As of May 7, 2025, Let's Encrypt stopped including OCSP URLs in new certificates. Consequently, any certificate issued after this date will lack the necessary OCSP URL, causing the warning to appear in the server logs. The OCSP responders for Let's Encrypt were scheduled to be turned off entirely on August 6, 2025. Therefore, for certificates issued after May 7, 2025, OCSP stapling is no longer a viable option.</p>
]]></description><link>https://forum.cloudron.io/topic/14265/how-to-disable-ocsp-stapling</link><generator>RSS for Node</generator><lastBuildDate>Thu, 15 Oct 2026 14:38:27 GMT</lastBuildDate><atom:link href="https://forum.cloudron.io/topic/14265.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 02 Sep 2025 11:12:46 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to How to disable OCSP stapling? on Thu, 04 Sep 2025 07:51:49 GMT]]></title><description><![CDATA[<p dir="auto">Fixed here - <a href="https://git.cloudron.io/platform/box/-/commit/ac7001b96e176e540ede9bb81e3fcb17ae7f6416" target="_blank" rel="noopener noreferrer nofollow ugc">https://git.cloudron.io/platform/box/-/commit/ac7001b96e176e540ede9bb81e3fcb17ae7f6416</a></p>
]]></description><link>https://forum.cloudron.io/post/112378</link><guid isPermaLink="true">https://forum.cloudron.io/post/112378</guid><dc:creator><![CDATA[girish]]></dc:creator><pubDate>Thu, 04 Sep 2025 07:51:49 GMT</pubDate></item><item><title><![CDATA[Reply to How to disable OCSP stapling? on Thu, 04 Sep 2025 07:39:22 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/girish" aria-label="Profile: girish">@<bdi>girish</bdi></a> it seems to be that the ssl certs are not the cause of my openid / dashboard crashes. I can't find anything else in the logs..</p>
]]></description><link>https://forum.cloudron.io/post/112377</link><guid isPermaLink="true">https://forum.cloudron.io/post/112377</guid><dc:creator><![CDATA[BetaBreak]]></dc:creator><pubDate>Thu, 04 Sep 2025 07:39:22 GMT</pubDate></item><item><title><![CDATA[Reply to How to disable OCSP stapling? on Wed, 03 Sep 2025 16:04:09 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/betabreak" aria-label="Profile: BetaBreak">@<bdi>BetaBreak</bdi></a> Thanks for the reminder. I read that announcement and summarized it here - <a href="https://forum.cloudron.io/topic/4917/ocsp-stapling-for-tls-ssl/7">https://forum.cloudron.io/topic/4917/ocsp-stapling-for-tls-ssl/7</a> . We will remove the stapling config in our code entirely , that way the warnings will go away.</p>
]]></description><link>https://forum.cloudron.io/post/112352</link><guid isPermaLink="true">https://forum.cloudron.io/post/112352</guid><dc:creator><![CDATA[girish]]></dc:creator><pubDate>Wed, 03 Sep 2025 16:04:09 GMT</pubDate></item><item><title><![CDATA[Reply to How to disable OCSP stapling? on Wed, 03 Sep 2025 15:44:27 GMT]]></title><description><![CDATA[<p dir="auto">Fixed by grep -r "ssl_stapling" /etc/nginx/ and manually commenting out # ssl_stapling on; and # ssl_stapling on; &gt; Reinstalling domain (location) in dashboard also works...</p>
]]></description><link>https://forum.cloudron.io/post/112350</link><guid isPermaLink="true">https://forum.cloudron.io/post/112350</guid><dc:creator><![CDATA[BetaBreak]]></dc:creator><pubDate>Wed, 03 Sep 2025 15:44:27 GMT</pubDate></item></channel></rss>