autocert / OCSP stapling errors are shown when autocert is not enabled

[desimone]

Got

OCSP stapling errors are shown even when autocert is not enabled. My understanding is our autocert and ocsp code is deeply coupled. This often creates user confusion when our users aren't actually using autocert

Want

Ideally, we should de-couple OCSP functionality from our autocert stack.

Less ideally, we should not present confusing error messages to our users.

Related

• internal/httputil: support OCSP stapling #193
• Log isn't pure JSONL; includes some differently formatted "OCSP staple" lines #4133
• OCSP staple sometimes missing #1946
  Originally posted by @wasaga in default k8s ingress setup has autocert errors in the logs ingress-controller#658 (comment)

[calebdoxsey]

The linked issues have no apparent relationship to this issue.

We cannot de-couple OCSP functionality from autocert. It's a core piece of functionality in certmagic and AFAIK not a feature we want to remove.