fix(tls): default OCSP stapling to off for new inbound certs

Certs without an OCSP responder URL (e.g. Let's Encrypt, which dropped OCSP in 2025) made xray log 'ignoring invalid OCSP: no OCSP server specified in cert' on every refresh. Default the per-cert ocspStapling interval to 0 (disabled) so new inbounds stay quiet; the field is kept for certs that do support stapling.
2026-07-24 05:26:08 +00:00 · 2026-06-21 19:15:57 +02:00
parent 3aa76ea05b
commit 39774a6a38
5 changed files with 10 additions and 10 deletions
@@ -132,7 +132,7 @@ export default function TlsForm({
                  keyFile: '',
                  certificate: [],
                  key: [],
-                  ocspStapling: 3600,
+                  ocspStapling: 0,
                  oneTimeLoading: false,
                  usage: 'encipherment',
                  buildChain: false,