OCSP stapling without using ngx.ocsp Lua API?

pyunyh · 2020-01-30T16:37:41+00:00

Hello guys!I am in need of attaching some kind of state/ctx information to a keepalive tcp connection, and lookingat the code (for example a lua table for I...

OCSP stapling without using ngx.ocsp Lua API?

pyunyh

Hello,

It seems OpenResty provides a ngx.ocsp Lua API.
Since documentation on ngx.ocsp indicates "experimental" and lacks 
some features like nextUpdate, I tried nginx's OCSP stapling
feature *without* using ngx.ocsp Lua API. Unfortunately it didn't
work as expected so I tried it again on stock nginx with the same
configuration. Stock nginx worked well.
Before digging into internal details, it would be even better to
know whether admin should use ngx.ocsp Lua API in order to support
OCSP stapling with OpenResty.

Oh, forgot to mention that it's OpenResty 1.15.8.2 on Ubuntu 18.04.

Thanks.