auto-ssl / auto-ssl/lua-resty-auto-ssl
Timeout error - OCSP responder query - inside Kubernetes network
- Dominant language
- Lua
- Stars
- 2k
- Forks
- 184
- PR merge metrics
- No merged PRs in 30d
Description
I have a replicaset running openresty inside a kubernetes network. Everytime I try to access some domains that are pointed to our host, I get this error:
```shell
021/09/23 13:38:14 [error] 32#0: *2831 [lua] ssl_certificate.lua:260: set_response_cert(): auto-ssl: failed to set ocsp stapling for academiamedica.com.br - continuing anyway - failed to get ocsp response: OCSP responder query failed (http://r3.o.lencr.org): timeout, context: ssl_certificate_by_lua*, client: xxx.xxx.xxx.xxx, server: 0.0.0.0:443
```
Is there any other configuration to apply to make autossl works inside a kubernetes' pod?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the error from ssl_certificate.lua:260 and the auto-ssl OCSP stapling path. Check whether the Kubernetes pod can reach the OCSP responder at http://r3.o.lencr.org and identify any configuration needed for that network path. Done means determining the cause of the timeout and documenting or verifying a working configuration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes, lua, nginx
- Domain
- infrastructure, networking, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100