Change Details

{F158455}

We should do OCSP for the misc cluster as well. There's some quibbles to sort out about whether the `planet` cert will work correctly with the OCSP infrastructure we have today (the wmfusercontent and wm.o certs should be fine), as I believe stapling is a server-global thing for nginx in practice, even though it seems to be configured there and through puppet as a per-cert thing... From @dzahn's original report of direct-OCSP intermittent failure: {F158455}

We should do OCSP for the misc cluster as well. There's some quibbles to sort out about whether the `planet` cert will work correctly with the OCSP infrastructure we have today (the wmfusercontent and wm.o certs should be fine), as I believe stapling is a server-global thing for nginx in practice, even though it seems to be configured there and through puppet as a per-cert thing... From @dzahn's original report of direct-OCSP intermittent failure: {F158455}