# How to resolve "ssl\_stapling" ignored, no OCSP responder URL in the certificate error

**URL:** <https://discourse.mailinabox.email/t/how-to-resolve-ssl-stapling-ignored-no-ocsp-responder-url-in-the-certificate-error/12993>\
**Category:** Improvements\
**Created:** [July 1, 2025, 12:29pm UTC](https://discourse.mailinabox.email/t/how-to-resolve-ssl-stapling-ignored-no-ocsp-responder-url-in-the-certificate-error/12993 "2025-07-01T12:29:10Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![PhilT](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/philt/32/3017_2.png) [@PhilT](https://discourse.mailinabox.email/u/PhilT)\
**Post date:** [July 1, 2025, 12:29pm UTC](https://discourse.mailinabox.email/t/how-to-resolve-ssl-stapling-ignored-no-ocsp-responder-url-in-the-certificate-error/12993/1 "2025-07-01T12:29:10Z")

</div>

LetsEncrypt announced in December 2024, that they would be ending support for SSL Stapling.

The timeline for this was given as :

- January 30, 2025
- 

```
    OCSP Must-Staple requests will fail, unless the requesting account has previously issued a certificate containing the OCSP Must Staple extension

```

- 

```
May 7, 2025

```

- 

```
    Prior to this date we will have added CRL URLs to certificates

```

- 

```
    On this date we will drop OCSP URLs from certificates

```

- 

```
    On this date all requests including the OCSP Must Staple extension will fail

```

- 

```
August 6, 2025

```

- 

```
    On this date we will turn off our OCSP responders

```

The error I was receiving in the /var/log/nginx/error.log, when nginx was restarted was:

```auto
"ssl_stapling" ignored, no OCSP responder URL in the certificate

```

The fix for this is easy. Open /etc/nginx/conf.d/ssl.conf in your favorite editor and comment out the following lines:

```auto
#ssl_stapling on;
#ssl_stapling_verify on;

```

Save the file, and

```auto
systemctl restart nginx

```

Should get you back up and running.

---

<div class="post-metadata">

**Author:** ![system](https://discourse.mailinabox.email/uploads/default/original/2X/4/4d0933d13c456b7e57f296aa6cc344525b6f0c70.png) [@system](https://discourse.mailinabox.email/u/system)\
**Post date:** [August 31, 2025, 12:30pm UTC](https://discourse.mailinabox.email/t/how-to-resolve-ssl-stapling-ignored-no-ocsp-responder-url-in-the-certificate-error/12993/2 "2025-08-31T12:30:06Z")

</div>

This topic was automatically closed after 61 days. New replies are no longer allowed.