René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Nginx - [warn] \"ssl_stapling\" ignored, no OCSP responder URL in the certificate","articleBody":"### OCSP 미지원시 Nginx 경고\n\n```\n# nginx -t\nnginx: [warn] \"ssl_stapling\" ignored, no OCSP responder URL in the certificate \"/etc/letsencrypt/live/php79.com/fullchain.pem\"\nnginx: the configuration file /etc/nginx/nginx.conf syntax is ok\nnginx: configuration file /etc/nginx/nginx.conf test is successful\n```\n\n### 원인 - Let's Encrypt OCSP 서비스 종료\n\nhttps://letsencrypt.org/2025/08/06/ocsp-service-has-reached-end-of-life\n\n\n### 기존 사용자용 수작업 조치\n\n- ssl_stapling 설정 확인\n\n```sh\ngrep -E '^ssl_stapling' /etc/letsencrypt/php79/*.conf\n```\n\n```\n# 파일 목록 예시\n/etc/letsencrypt/php79/ssl-hosting.conf:ssl_stapling on;\n/etc/letsencrypt/php79/ssl-hosting.conf:ssl_stapling_verify on;\n/etc/letsencrypt/php79/ssl-modern.conf:ssl_stapling on;\n/etc/letsencrypt/php79/ssl-modern.conf:ssl_stapling_verify on;\n/etc/letsencrypt/php79/ssl-stable.conf:ssl_stapling on;\n/etc/letsencrypt/php79/ssl-stable.conf:ssl_stapling_verify on;\n```\n\n- 쉘 스크립트로 일괄 주석 처리\n\n```sh\nFILES=( `grep -lE '^ssl_stapling' /etc/letsencrypt/php79/*.conf` )\nfor i in \"${FILES[@]}\"\ndo\n    echo \"replace file : ${i}\"\n    sed -i 's/^ssl_stapling/#ssl_stapling/g' \"${i}\"\ndone\n```\n\n- ssl_stapling, ssl_stapling_verify 설정이 주석 처리(#)된 것 확인\n\n```sh\ngrep 'ssl_stapling' /etc/letsencrypt/php79/*.conf\n```\n\n- nginx 설정 테스트후 재시작\n\n```sh\nnginx -t \u0026\u0026 systemctl restart nginx\n```\n\n### 업데이트시 반영\n\n- [ ] OCSP 설정 기본 비활성화","author":{"url":"https://github.com/ibin79","@type":"Person","name":"ibin79"},"datePublished":"2025-08-20T00:39:43.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/114/stack/issues/114"}