Skip to content

elyograg/haproxy-ocsp-elyograg

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

haproxy-ocsp-elyograg

The get_ocsp_stapling script goes in /usr/local/sbin. The ocsp_list.cfg file goes in /usr/local/etc.

A stats socket must be added to the global section of the haproxy config. See haproxy_addition.cfg for details.

If you edit these files, you can change any of the file names or paths if that is required for your setup.

The config file has two filenames on each line. The first is the PEM filename which has the leaf certificate as the first item. The second is the PEM filename which has the issuing certificate as the first item.

To use, call the script from cron. How often you'll need to call it depends on the lifetime of the OCSP response. For the Lets Encrypt certs I use, the lifetime of the OCSP response is 7 days or less. I ran the script every four hours.

About

No description, website, or topics provided.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages