Should I concatenate all certificates(server + intermediates + root) or just(server + intermediates) for
ssl_trusted_certificate directive in NGINX.
You should add the following setting
ssl_stapling on; ssl_stapling_verify on; ssl_trusted_certificate /path/to/root_CA_cert_plus_intermediates;
to configure OCSP Stapling (the server certificate should not be concatenated here), but you should use
ssl_certificate, where the server certificate is provided together with all intermediate certificates:
On the other side one should don't include the