On 6/8/2021 1:47 AM, Remi Tricot-Le Breton wrote:
OCSP stapling won't work on any version that shows this warning (for this specific response). But apart from that, everything else should work fine, that's why you only get a warning when parsing the configuration file. If you are positive that your OCSP response is valid we may indeed have a bug on our side
The warning was completely valid. I was getting a bad ocsp response with my script running "openssl ocsp".
The problem turned out to be that I had the wrong issuer certificate. I updated that .pem file and now it works.
Thanks for the assist, and I think there probably is no bug. Shawn
