OCSP responders disabled by letsencrypt Q3 2025

diff --git a/etc/nginx/conf.d/default.conf b/etc/nginx/conf.d/default.conf
index 25526bc80e883b62f0dcbf8d57107cce223e5ae1..aaccca5051dba21d9125f9b7ddcc6fe6df4829ac 100644 (file)
--- a/etc/nginx/conf.d/default.conf
+++ b/etc/nginx/conf.d/default.conf
@@ -138,10 +138,10 @@ server {
 
   # HSTS
   add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
-  # OCSP stapling
-  ssl_stapling on;
-  ssl_stapling_verify on;
   ssl_trusted_certificate /etc/ssl/private/ca-certs.pem;
+  # OCSP stapling (NOTE: Responders disabled by letsencrypt as of Q3 2025)
+  #ssl_stapling on;
+  #ssl_stapling_verify on;
 
   # React app (base URL)
   location / {