auto-ssl / lua-resty-auto-ssl

On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt.
MIT License
1.94k stars 181 forks source link

Timeout error - OCSP responder query - inside Kubernetes network #263

Open pazfelipe opened 3 years ago

pazfelipe commented 3 years ago

I have a replicaset running openresty inside a kubernetes network. Everytime I try to access some domains that are pointed to our host, I get this error:

021/09/23 13:38:14 [error] 32#0: *2831 [lua] ssl_certificate.lua:260: set_response_cert(): auto-ssl: failed to set ocsp stapling for academiamedica.com.br - continuing anyway - failed to get ocsp response: OCSP responder query failed (http://r3.o.lencr.org): timeout, context: ssl_certificate_by_lua*, client: xxx.xxx.xxx.xxx, server: 0.0.0.0:443

Is there any other configuration to apply to make autossl works inside a kubernetes' pod?