DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don't error log when no OCSP responder URL exists (#8881)

Browse source
This commit is contained in:
Christian 2022-08-23 00:38:09 +02:00 committed by GitHub
parent 363a7f7fb2
commit fe09f6d096
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
rootfs/etc/nginx/lua/certificate.lua
View file

@ -120,10 +120,14 @@ end
-- While this has no functional implications, it generates extra load on OCSP servers. -- While this has no functional implications, it generates extra load on OCSP servers.
local function fetch_and_cache_ocsp_response(uid, der_cert) local function fetch_and_cache_ocsp_response(uid, der_cert)
local url, err = ocsp.get_ocsp_responder_from_der_chain(der_cert) local url, err = ocsp.get_ocsp_responder_from_der_chain(der_cert)
if not url then if not url and err then
ngx.log(ngx.ERR, "could not extract OCSP responder URL: ", err) ngx.log(ngx.ERR, "could not extract OCSP responder URL: ", err)
return return
end end
if not url and not err then
ngx.log(ngx.DEBUG, "no OCSP responder URL returned")
return
end
local request local request
request, err = ocsp.create_ocsp_request(der_cert) request, err = ocsp.create_ocsp_request(der_cert)