From: William Lallemand <wlallemand@haproxy.com>
Date: Wed, 17 Jul 2024 15:46:16 +0000 (+0200)
Subject: DOC: configuration: issuers-chain-path not compatible with OCSP
X-Git-Tag: v3.1-dev4~37
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8a3e4a608b5cfd50f080d082f21cf5b673fdc292;p=thirdparty%2Fhaproxy.git

DOC: configuration: issuers-chain-path not compatible with OCSP

State that issuers-chain-path is not compatible with OCSP features.

Must be backported in every stable version.
---

diff --git a/doc/configuration.txt b/doc/configuration.txt
index 4e38936f28..4996049a46 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@ -2044,6 +2044,10 @@ issuers-chain-path <dir>
   "issuers-chain-path" directory. All other certificates with the same issuer
   will share the chain in memory.
 
+  The OCSP features are not able to use the completed chain from
+  'issuers-chain-path', please use an additionnal .issuer file if you want to
+  achieve OCSP stapling.
+
 key-base <dir>
   Assigns a default directory to fetch SSL private keys from when a relative
   path is used with "key" directives. Absolute locations specified prevail and