auto
mode. In this mode the server will only fetch staples when the Must-Staple flag is configured in the certificate.ocsp: false
)must
. This means that staples will be fetched only for certificates that have the Must-Staple flag enabled as well, but in case of revocation the server will shutdown rather than run with a revoked staple.
In this configuration, the url
will also override the OCSP responder URL that may have been configured in the certificate.store_dir
is configured in the NATS Server, the directory will be used to cache staples on disk to allow the server to resume in case of restarts without having to make another request to the OCSP responder if the staple is still valid.store_dir
will be reused and disk caching will be automatically enabled.