search

macbre / docker-nginx-http3

Stable and up-to-date root-less nginx with quic + http/3, google brotli compression, njs, GeoIP2, and Grade A+ SSL config
https://hub.docker.com/r/macbre/nginx-http3
172 stars 54 forks source link

ssl_stapling_verify is not supported with BoringSSL. #114

Open justdan6 opened 1 year ago

justdan6 commented 1 year ago

This can be seen at https://www.ssllabs.com/ssltest/analyze.html?d=wbc.macbre.net under "OCSP stapling" and with the warning when running run-docker.sh . A patch is available and can be added before building nginx for an alternative method for supporting OCSP stapling - https://github.com/kn007/patch/blob/master/Enable_BoringSSL_OCSP.patch .

Attempting to apply this patch in https://github.com/justdan6/docker-nginx-http3/tree/fix-ocsp-stapling but running into issues - https://github.com/justdan6/docker-nginx-http3/issues/1

natsl05164 commented 1 year ago

Hi, i added the patch in this PR https://github.com/macbre/docker-nginx-http3/pull/116

vincejv commented 3 months ago

since the project has migrated to openssl https://github.com/macbre/docker-nginx-http3/commit/f3931d8b5eb0179a32fa0718193cfd0cfbf54924 this issue should be marked as won't fix?

github-actions[bot] commented 2 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.