From cf5952f5081b8f4a1ac7e5e6f6ae993667ae369c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20B=C3=BCnemann?= <Felix.Buenemann@gmail.com>
Date: Sat, 2 May 2020 22:14:21 +0200
Subject: [PATCH] fix haproxy deploy hook ocsp update

fixes ocsp reponse update failing with `Responder Error: unauthorized (6)`
by removing `-no_nonce` switch from `openssl oscp` command .
---
 deploy/haproxy.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/deploy/haproxy.sh b/deploy/haproxy.sh
index 3cd2a80..0a45ee0 100644
--- a/deploy/haproxy.sh
+++ b/deploy/haproxy.sh
@@ -233,7 +233,6 @@ haproxy_deploy() {
           -header Host${_header_sep}\"${_ocsp_host}\" \
           -respout \"${_ocsp}\" \
           -verify_other \"${_issuer}\" \
-          -no_nonce \
           ${_cafile_argument} \
           | grep -q \"${_pem}: good\""
         _debug _openssl_ocsp_cmd "${_openssl_ocsp_cmd}"