Hi.

First of all, thank you very much for all your great efforts on 7.4!

I upgraded my VPS from 7.3 to 7.4, and It's weird that, after upgrade,
Qualys SSL Labs test for HTTPS/SSL websites gives:
"HTTP request to this server failed, see below for details."

However, my website works fine with browsers,
and my nginx configuration has nothing weird at all,
checked with "nginx -t", I had no such message as I checked just before I
upgraded.

And also, one more tool; immuniweb.com/ssl/ reports:
"SERVER DOES NOT SUPPORT OCSP STAPLING" after the upgrade.

However, again, OCSP stapling is implemented correctly in my nginx.conf
file, working since a year.

And just before upgrade, I had no such messages from none of those SSL
checkers.

and I haven't changed anything at all regarding my nginx configuration.

My VPS is rented from Hetzner, and I had created a snapshot of it just
before the upgrade process.
So, now one-click revert to older snapshot, back to OpenBSD 7.3, both
tests' reports are fine now.

No more "HTTP request to this server failed" from Qualys SSL Labs,
and no more "SERVER DOES NOT SUPPORT OCSP STAPLING" from Immuniweb SSL test.

Obviously, something is not good with 7.4?

My SSL certificates are from Let's Encrypt, and I have "ssl_protocols
TLSv1.3 TLSv1.2;" in my nginx.conf, if that would help?

Best Wishes&Regards,

Mark.

Reply via email to