id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	uname	nginx_version
1305	OCSP stapling fails due to not working DNS resolution	grazzolini@…		"I'm the maintainer of Archlinux's nginx-mainline package. Recently we have received a bug report, https://bugs.archlinux.org/task/54478, claiming that, if there's no available nameserver or no connectivity at the time of the boot, OCSP stapling will fail and nginx won't run it again, even after there is connectivity.

We need to issue a restart to make it work. We have recently added a workaround for both our packages, nginx and nginx-mainline, that only works on Archlinux, due to systemd, in where we make the nginx service unit to wait for network-online.target and nss-lookup.target. Even thought this workaround works, it would be nice if nginx would periodically check for connectivity and re-issue a OCSP stapling request."	defect	closed	minor		other	1.13.x	wontfix	ocsp,dns,stapling		Linux arch 4.11.6-3-ARCH #1 SMP PREEMPT Thu Jun 22 12:21:46 CEST 2017 x86_64 GNU/Linux	"nginx version: nginx/1.13.1
built with OpenSSL 1.1.0f  25 May 2017
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --conf-path=/etc/nginx/nginx.conf --sbin-path=/usr/bin/nginx --pid-path=/run/nginx.pid --lock-path=/run/lock/nginx.lock --user=http --group=http --http-log-path=/var/log/nginx/access.log --error-log-path=stderr --http-client-body-temp-path=/var/lib/nginx/client-body --http-proxy-temp-path=/var/lib/nginx/proxy --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-compat --with-file-aio --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_degradation_module --with-http_flv_module --with-http_geoip_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-pcre-jit --with-stream --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-threads
"