"Openresty for Windows" does not support the OCSP function. After I configured everything properly, Openresty can use the SSL certificate and key of the OCSP function normally in Linux, but it cannot be used normally in "Openresty for Windows". error.log:
2025/06/09 01:02:05 [warn] 5884#4012: "ssl_stapling" ignored, no OCSP responder URL in the certificate "C:/nginx/ssl/full.pem"
But I am sure that there is no problem with the format of "full.pem". Not only is there no problem with it, but there is no problem with the path and pem file of "ssl_certificate_key" and "ssl_trusted_certificate", and the OCSP root chain is also correct. So after the analysis, there is only one possibility: the Openresty software itself has OCSP compatibility issues in the Windows system environment. I hope this problem can be fixed in the next version. By the way, it would be even better if you could make openresty support HTTP/3 perfectly in windows environment.
“openresty for windows”不支持OCSP功能,当我把一切都配置妥当之后,在linux下,openresty能正常使用OCSP功能的SSL证书和秘钥,在“openresty for windows”下并不能正常使用。系统报错:2025/06/09 01:02:05 [warn] 5884#4012: "ssl_stapling" ignored, no OCSP responder URL in the certificate "C:/nginx/ssl/full.pem"
类似这种日志。但是我很确定full.pem的格式是没有任何问题的。不仅它没有问题,包括ssl_certificate_key和ssl_trusted_certificate的路径和pem文件也都没有任何问题,OCSP根链也是正确的。所以分析到最后,只剩一种可能:windows系统环境下的openresty软件本身就存在OCSP方面的兼容性问题。希望能在下一个版本中修复这个问题。顺便,如果您能让openresty在windows环境中也能完美支持HTTP/3就更好了。