Hi, On my server, I don’t have a v4 resolver, juste an IPv6 one: bulbizarre ~ # cat /etc/resolv.conf # Generated by dhcpcd from eth0.dhcp, eth0.ra # /etc/resolv.conf.head can replace this line domain swordarmor.fr nameserver 2001:470:1f13:138::1 # /etc/resolv.conf.tail can replace this line
I have some error messages about “no resolver defined”: ==> /var/log/nginx/error_log <== 2016/08/19 14:00:03 [warn] 29733#29733: no resolver defined to resolve ocsp.startssl.com while requesting certificate status, responder: ocsp.startssl.com 2016/08/19 14:00:03 [error] 29733#29733: OCSP_basic_verify() failed (SSL: error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:Verify error:unable to get local issuer certificate) while requesting certificate status, responder: ocsp.startssl.com But, my resolver is perfecly working: bulbizarre ~ # dig -t A ocsp.startssl.com ; <<>> DiG 9.10.3-P4 <<>> -t A ocsp.startssl.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50744 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;ocsp.startssl.com. IN A ;; ANSWER SECTION: ocsp.startssl.com. 600 IN CNAME ocsp.startssl.com.akamaized.net. ocsp.startssl.com.akamaized.net. 11236 IN CNAME a36.d.akamai.net. a36.d.akamai.net. 20 IN A 2.18.245.56 a36.d.akamai.net. 20 IN A 2.18.245.43 ;; Query time: 529 msec ;; SERVER: 2001:470:1f13:138::1#53(2001:470:1f13:138::1) ;; WHEN: Fri Aug 19 14:01:28 CEST 2016 ;; MSG SIZE rcvd: 150 -- alarig
signature.asc
Description: OpenPGP digital signature
_______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx
