Skip to content

Commit fe09f6d

Browse files
authored
Don't error log when no OCSP responder URL exists (#8881)
1 parent 363a7f7 commit fe09f6d

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

rootfs/etc/nginx/lua/certificate.lua

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,10 +120,14 @@ end
120120
-- While this has no functional implications, it generates extra load on OCSP servers.
121121
local function fetch_and_cache_ocsp_response(uid, der_cert)
122122
local url, err = ocsp.get_ocsp_responder_from_der_chain(der_cert)
123-
if not url then
123+
if not url and err then
124124
ngx.log(ngx.ERR, "could not extract OCSP responder URL: ", err)
125125
return
126126
end
127+
if not url and not err then
128+
ngx.log(ngx.DEBUG, "no OCSP responder URL returned")
129+
return
130+
end
127131

128132
local request
129133
request, err = ocsp.create_ocsp_request(der_cert)

0 commit comments

Comments
 (0)