0

Windows Server 2022
Apache x64 2.4.57
OpenSSL 3.0.8

My Apache SSL conf has this:

SSLUseStapling On
SSLStaplingCache "shmcb:${SRVROOT}/logs/ssl_stapling(65536)"
SSLStaplingStandardCacheTimeout 3600
SSLStaplingErrorCacheTimeout 600

But https://entrust.ssllabs.com/ reports this:

enter image description here

Is there some setting I am missing?

Improve this question

1 Answer 1

Reset to default
3

In the images the properties of the certificate are shown. OCSP Must Staple is a property of the certificate, i.e. that the certificate should only be used together with OCSP stapling - see here for more information on this and how to create such certificates.

The configuration of the server you show instead shows how to make OCSP stapling work with the Apache web server. It does not affect the OCSP Must Staple property of the certificate and thus does not affect the display of the certificate properties either. But if you use a certificate with this property and don't have OCSP stapling enabled in the web server, then the TLS handshake will fail if the client enforces this certificate property.

Improve this answer
1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .