WebPagetest Forums
Show OCSP Connection? - Printable Version

+- WebPagetest Forums (https://www.webpagetest.org/forums)
+-- Forum: WebPagetest (/forumdisplay.php?fid=7)
+--- Forum: Bugs/Issues (/forumdisplay.php?fid=10)
+--- Thread: Show OCSP Connection? (/showthread.php?tid=12884)



Show OCSP Connection? - raymond - 03-29-2014 03:43 AM

From what I understand, HTTPS sites that don't enable OCSP stapling will force the visitors to visit the OCSP servers to check if the certificate is valid/revoked.

I've tested quite a few HTTPS sites that don't have OCSP stapling enabled on webpagetests but none of the runs shows a ocsp connection.

Is this intentional?


RE: Show OCSP Connection? - pmeenan - 03-29-2014 04:15 AM

Depends on the browser. Chrome (and Firefox now I believe) don't do OCSP checks unless it's an EV certificate.


RE: Show OCSP Connection? - raymond - 03-29-2014 05:27 AM

I have an EV certificate for my website with OCSP stapling disabled, but I still don't see any OCSP checks.

Domain is: https://www.raymond.cc


RE: Show OCSP Connection? - andydavies - 03-31-2014 09:00 PM

I see the OCSP check in Firefox and Chrome:

http://www.webpagetest.org/result/140331_VQ_4528bcd40ea9a6145f8d8e8ece910f93/
http://www.webpagetest.org/result/140331_V9_0e98433e5aa7248dd6b17e64aad9867c/