• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Best Practice OCSP Stapling for Clients

Janko1000

Regular Pleskian
Hi all,

can Anybody tell what is the best Way to add OCSP Stapling for Clients?
I try to add the Commands to the Nginx Field but without success:

Code:
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /path/to/cert_chain.pem;
resolver 8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout 5s;

The Clients have the Certs from everywhere.... Comodo, StartSSL, Thawte, WoSign and many others. I want only add OCSP for some Clients.
 
Make sure the certificate is setup for the domain and working then you should be able to use the following command per domain in the nginx additional directives field:

Code:
#Enable OCSP
ssl_stapling on;
ssl_stapling_verify on;
resolver 8.8.4.4 8.8.8.8 valid=300s;
resolver_timeout 10s;
 
Back
Top