OpenResty lua-resty-auto-ssl: failed to set ocsp stapling for

错误日志

lua-resty-auto-ssl报错。

2021/02/17 08:59:12 [error] 28822#0: 17557 [lua] ssl_certificate.lua:260: set_response_cert(): auto-ssl: failed to set ocsp stapling for www.example.com - continuing anyway - failed to get ocsp response: OCSP responder query failed (http://r3.o.lencr.org): cannot assign requested address, context: ssl_certificate_by_lua

解决办法

nginx.conf配置中resolver添加ipv6=off，关闭IPv6的DNS解析，只使用IPv4。

resolver 8.8.8.8 ipv6=off;

备注

使用ifconfig命令检查是否支持IPv6，如果没有inet6则说明不支持IPv6。

root@localhost:~# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:16:3e:11:83:63  
          inet addr: Bcast: Mask: 
          inet6 addr:

参考

https://github.com/auto-ssl/lua-resty-auto-ssl/issues/12#issuecomment-259402817