One can use OpenSSL’s
c_client to validate that OCSP Stapling is working.
openssl s_client -connect 127.0.0.1:443 -tls1 -tlsextdebug -status
|pagetop[tracker-conn]: <h1>tracker - Connections/min</h1><hr>|
|target[tracker-conn]: `curl http://localhost:6969/stats?mode=conn`|
|options[tracker-conn]: growright, nopercent, perminute|
The sendmail package, which comes preinstalled with many distros, is often simply too much for a simple server that should not receive emails but rather deliver them. The sSMTP package is a lightweight replacement that does not set up regular cronjobs and only reacts if a subsystem actually wants to send a mail.
apt-get purge --yes sendmail*