ocsp获取问题

1Panel
,
1

使用的是1panel最新版版本（带waf）

openresty日志

买的证书是这种报错

2024/05/14 09:46:36 [warn] 220#220: no resolver defined to resolve dvcasha2.ocsp-certum.com while requesting certificate status, responder: dvcasha2.ocsp-certum.com, certificate: “/www/sites/xxx/ssl/fullchain.pem”
2024/05/14 09:46:36 [error] 220#220: OCSP_basic_verify() failed (SSL: error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:Verify error:self signed certificate in certificate chain) while requesting certificate status, responder: dvcasha2.ocsp-certum.com, peer: 23.35.148.142:80, certificate: “/www/sites/xxx/ssl/fullchain.pem”

用1panel申请证书功能是这种报错

[warn] 220#220: no resolver defined to resolve r3.o.lencr.org while requesting certificate status, responder: r3.o.lencr.org, certificate: “/www/sites/xxx/ssl/fullchain.pem”

有大佬知道是什么情况吗？更新成最新版的1panel后的一天，网站突然全都打不开，发现日志都是这种问题。

2

看着像证书问题 关闭 https 重新打开试试

3

没有用。
我在waf设置了这个 ip为白名单后，下次报错中peer的ip就会变。这会不会和waf有关系？但是我没改过waf

responder: dvcasha2.ocsp-certum.com, peer: 23.35.148.142:80

4

找到问题了，得把OpenResty配置的这两行删掉。只有商业版证书才支持启用 :innocent:

ssl_stapling on; 
ssl_stapling_verify on;