Current time: 01-19-2021, 07:37 PM Hello There, Guest! (LoginRegister)

Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
SSL Gaps
12-03-2015, 11:19 PM
Post: #2
RE: SSL Gaps
Hi,

The gaps is when the browser is issuing OCSP requests to check the validity of the certificates. In case of EV chain it seems to be aggresive, and will try to check the status of all of the certificates in the chain, and it also seems that this operation is blocking.

Unfortunately it's not shown in the waterfall - it's just a gap, but if you swithc to firefox - it all becomes clear - what is going on behind the scenes, you can see all the ocsp requests clearly. Have a look here:

http://www.webpagetest.org/result/151203...1/details/

You can enable OCSP stapling on your server - but this will cut just one OCSP request, the rest will still be there.

Debugging OCSP is hard, as no dev tolls will show you those requests being made - you need to dump the traffic, and analyze it later. You can do it easily in WPT in the options.

Regards,
Arek
Find all posts by this user
Quote this message in a reply
Post Reply 


Messages In This Thread
SSL Gaps - johnrussell9983 - 11-17-2015, 03:44 AM
RE: SSL Gaps - agoralski - 12-03-2015 11:19 PM
RE: SSL Gaps - johnrussell9983 - 12-16-2015, 04:26 AM
RE: SSL Gaps - pmeenan - 12-18-2015, 01:31 AM
RE: SSL Gaps - johnrussell9983 - 12-18-2015, 02:14 AM
RE: SSL Gaps - agoralski - 01-06-2016, 09:54 PM
RE: SSL Gaps - pmeenan - 01-06-2016, 11:21 PM
RE: SSL Gaps - pmeenan - 01-09-2016, 02:29 AM
RE: SSL Gaps - agoralski - 01-11-2016, 06:25 PM
RE: SSL Gaps - Anton Chigurh - 01-12-2016, 12:58 PM
RE: SSL Gaps - pmeenan - 01-13-2016, 03:10 AM

Forum Jump:


User(s) browsing this thread: 1 Guest(s)