auto-ssl / auto-ssl/lua-resty-auto-ssl

Timeout error - OCSP responder query - inside Kubernetes network

Open
#263 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Lua
Stars
2k
Forks
184
PR merge metrics
No merged PRs in 30d

Description

I have a replicaset running openresty inside a kubernetes network. Everytime I try to access some domains that are pointed to our host, I get this error:

```shell
021/09/23 13:38:14 [error] 32#0: *2831 [lua] ssl_certificate.lua:260: set_response_cert(): auto-ssl: failed to set ocsp stapling for academiamedica.com.br - continuing anyway - failed to get ocsp response: OCSP responder query failed (http://r3.o.lencr.org): timeout, context: ssl_certificate_by_lua*, client: xxx.xxx.xxx.xxx, server: 0.0.0.0:443
```

Is there any other configuration to apply to make autossl works inside a kubernetes' pod?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the error from ssl_certificate.lua:260 and the auto-ssl OCSP stapling path. Check whether the Kubernetes pod can reach the OCSP responder at http://r3.o.lencr.org and identify any configuration needed for that network path. Done means determining the cause of the timeout and documenting or verifying a working configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes, lua, nginx
Domain
infrastructure, networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.