When I log into the OPNsense dashboard from:
https://192.168.5.1:4433
the page loads almost instantly but when I log in from:
https://opnsense.example.com:4433
it can take a 1~2 min to load. Once loaded, the SSL cert is valid.
I tried adding a host override in Unbound but that didn't make any difference.
What happens when you add an entry for it in your hosts file?
No way it's DNS!
Cheers,
Franco
Well, it could be, if that name also resolved to IPv6 and that does not work. Another alternative could be OCSP stapling or lack thereof.
Just as info for all the OCSP fans.
https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls.html
The future will be implementations like these in each browser:
https://github.com/mozilla/crlite
Quote from: bartjsmit on August 07, 2024, 07:47:04 AM
What happens when you add an entry for it in your hosts file?
Yup, that did the trick. Loads as quick as the direct approach. Thanks!