"ssl_stapling" ignored, host not found in ocsp responder "ocsp.int-x3.letsencrypt.org" in the certificate

1

After installing HestiaCP, everything was working perfectly fine. I added some accounts thru the panel. Today I delete one account and tried to restart the Nginx and Apache.
Apache restarted successfully, but Nginx failed with the following error:

"ssl_stapling" ignored, host not found in ocsp responder “ocsp.int-x3.letsencrypt.org” in the certificate

As my websites went offline, I commented out the following lines in all .conf files to restart the Nginx. How can I fix this error so that I can uncomment these lines?

#ssl_stapling on;
#ssl_stapling_verify on;
2

I think the old certificate is left behind for the deleted domain.

Please check if /usr/local/hestia/data/users/{user}/ssl the certificate still exists?

3

There is no folder for the deleted domain inside /usr/local/hestia/data/users/
I checked everything inside /usr/local/hestia/data/users/ and no certificate for the deleted domain exists there.

4

Do you have any additional informations, like the certificate path itself in the error message or nginx log? Could give you a hint about which one is causing troubles.

5

The error_log of Nginx has 4 lines with the same message:
ssl_stapling" ignored, host not found in OCSP responder “ocsp.int-x3.letsencrypt.org” in the certificate “/home/admin/conf/web/domain.com/ssl/domain.com.pem”

I tried to regenerate letsencrypt certificate for my domain and it gave error: DNS record could not be found.
Luckily I had backup of the certificate. I am using cloudflare DNS and it’s working fine with old letsencrypt certificate.

6

What happens if you disable and reenable that particular domain?

7

How to disable a domain?

8

Sorry, I mean disable and reenable the ssl certificate of that domain. Also you should not host anything below the admin user - expect the hostname domain which will be used for the services certificate.

9

There is no domain under admin.
I tried to disable and reenable the certificate on the domain, but letsencrypt gave the error: “DNS record for the domain could not be found.”

10

“DNS record for the domain could not be found.”

nslookup domain.com

And check your Cloudflare if dns is set propperly…

1 Like
11

It seems that I found the fix for my problem.
There were many IPs under banned list of the firewall.
I just turned off both IPtables and fail2ban and it solved the problem.

1 Like