From 298c357bc9a6023d1ce470ad1711851775313c0a Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Sun, 4 May 2025 21:57:41 -0400 Subject: handle Let's Encrypt removing OCSP support We can no longer use OCSP stapling and Must-Staple. These will soon be obsolete once the `shortlived` profile is available for public use since it will provide certificates with a similar lifetime as OCSP responses. In the meantime, we've moved to the `tlsserver` profile stripping legacy features to prepare for the `shortlived` profile which will be identical to `tlsserver` but with a validity period of 6 days. --- certbot-replicate | 1 - 1 file changed, 1 deletion(-) (limited to 'certbot-replicate') diff --git a/certbot-replicate b/certbot-replicate index aab07d55..ef7d9cf4 100755 --- a/certbot-replicate +++ b/certbot-replicate @@ -11,7 +11,6 @@ for replica in ${replicas[@]}; do echo rsync -rpcvl --delete --fsync --preallocate /etc/letsencrypt/ $replica:/etc/letsencrypt && - rsync -rpcvl --delete --fsync --preallocate /var/cache/certbot-ocsp-fetcher/ $replica:/var/cache/certbot-ocsp-fetcher && ssh root@$replica nginx -s reload || status=1 done -- cgit v1.3.1