mirror of
https://github.com/netbirdio/plugins.git
synced 2026-05-22 18:44:07 -07:00
security/acme-client: add note regarding OCSP support
This commit is contained in:
@@ -10,6 +10,13 @@ Plugin Changelog
|
||||
|
||||
4.8
|
||||
|
||||
BREAKING CHANGE: Let's Encrypt ends support for the OCSP Must Staple
|
||||
extension on 30.01.2025. Issuance requests will fail if this option is
|
||||
still enabled past this date.
|
||||
|
||||
Changed:
|
||||
* Add note regarding the support of OCSP
|
||||
|
||||
Fixed:
|
||||
* SFTP automation unable to transfer certs (#4477)
|
||||
|
||||
|
||||
+5
-1
@@ -68,11 +68,15 @@
|
||||
<type>dropdown</type>
|
||||
<help><![CDATA[Specify the domain key length: 2048, 3072, 4096, 8192 or ec-256, ec-384.]]></help>
|
||||
</field>
|
||||
<field>
|
||||
<label><![CDATA[NOTE: OCSP is not supported by all CAs.]]></label>
|
||||
<type>info</type>
|
||||
</field>
|
||||
<field>
|
||||
<id>certificate.ocsp</id>
|
||||
<label>OCSP Must Staple</label>
|
||||
<type>checkbox</type>
|
||||
<help>Generate and add OCSP Must Staple extension to the certificate.</help>
|
||||
<help>Generate and add OCSP Must Staple extension to the certificate. When this option is enabled and issueance/renewal requests fail, then this extension is probably not supported by the CA.</help>
|
||||
</field>
|
||||
<field>
|
||||
<label>Advanced Settings</label>
|
||||
|
||||
Reference in New Issue
Block a user