OCSP stapling error, certificate not trusted by the web browser

[matt (Matt Holt)]

There’s two unrelated things happening here:

@CutterXYZ

When accessing localhost through a web browser, I get the following error in the console:
[WARNING] Stapling OCSP: no OCSP stapling for [localhost]: no OCSP server specified in certificate .

This is fine, it just means there’s no OCSP server URL in the certificate, which is expected because Caddy itself issued this certificate and there’s no real utility for revocation checking in that case.

So that is a non-issue.

@CutterXYZ

Firefox shows a security warning with the error SEC_ERROR_UNKNOWN_ISSUER

That’s because Caddy can’t install the cert into Firefox on Windows. To be trusted there, you’ll have to install it manually. (It has nothing to do with the OCSP warning.)