Protocol: Missing OCSP Stapling¶

Identifier: issue_ssl_missing_ocsp_stapling

Scanner Support¶

Description¶

Without OCSP stapling, clients must contact a responder directly to obtain certificate revocation status.

How we test: We request certificate status during the TLS handshake and inspect the response.

References:

• https://www.rfc-editor.org/rfc/rfc6066

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_missing_ocsp_stapling:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.