nixos/acme: Fix ocspMustStaple option and add test

Some of the testing setup for OCSP checking was wrong and has been fixed too.
2020-10-07 00:18:13 +01:00
parent 2927f3fb45
commit 1edd91ca09
3 changed files with 43 additions and 5 deletions
@@ -70,7 +70,7 @@ let
    privateKey = testCerts.${domain}.key;
    httpPort = 80;
    tlsPort = 443;
-    ocspResponderURL = "http://0.0.0.0:4002";
+    ocspResponderURL = "http://${domain}:4002";
    strict = true;
  };