Skip to content

The Certs Stack no longer completes successfully due to "OCSP Must Staple" #46

@patrick-commit-us

Description

@patrick-commit-us

When trying to create a demo environment with a custom portal name - the certs stack called no longer works. It fails during the create of the Certificate Node Instance. In my investigation I found the following log error when trying to create the cert.

[Tue Feb 11 14:35:06 UTC 2025] { "type": "urn:ietf:params:acme:error:unauthorized", "detail": "Error finalizing order :: OCSP must-staple extension is no longer available: see https://letsencrypt.org/2024/12/05/ending-ocsp", "status": 403 }

Seems like it's related to these two lines -
here
and here

I'm not familiar with the ramifications of removing this option so I didn't put in a pr request. Hopefully someone more knowledgable than me can take a look.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions