Hi folks, Does anyone know if there’s a way to configure OCSP stapling and OCSP Must-Staple using Netlify? Thanks!

As far as I know, we do it automatically and there is nothing to enable. We definitely implemented it back in 2017 and I don’t see any indication that we turned it off later. Do you not see it enabled for your site when you check it with https://ssllabs.com ?

Thanks for your response, Chris. Correct, SSL Labs shows that OCSP stapling is not enabled on my new Netlify site [stapling-off]

Hi, @josh . I know we do enable OCSP stapling for our SSL/TLS certificates, but not the OCSP Must Staple. If you require this, you can upload your own custom certificate in place of the one automatically provisioned by Netlify. Again, the OCSP stapling itself is normally enabled for the automated L…

Hey @luke , thanks for this. Here is the SSL labs report for my site

I apologize for providing incorrect information, @josh . We do not support OCSP stapling despite multiple statements to the contrary. We did support this for a time but the change was rolled back because there were issues with our implementation. It was disabled until we could correct it. We do hav…

Thanks for the update @luke Unfortunately I’m not sure that custom certificates are a good solution here. OCSP responses have a short validity period so I would need to upload a new custom certificate every 2 or 3 days. I will stay tuned for updates on the feature request :slight_smile:

Are there any updates on this? I hope that this feature gets implemented.

I’d like to nudge this feature request. Support for OCSP is starting to show up in security reviews. We’re getting dinged for using netlify as a host because of it. I’m negotiating with our customer to drop this as a requirement, but we might have to migrate our frontend hosting if they won’t.

Confirming that anyone going through a penetration test will get a finding that you should turn on OCSP stapling. Any update on whether this will be ever implemented?

OCSP stapling and OCSP Must-Staple

Support

hrishikesh June 11, 2023, 11:45am 10

No further updates, and based on the age of this feature request (coupled with almost no-demand), there’s little chance this gets implemented.

Topic		Replies	Views
Openssl ssl Problem Support building	7	720	February 1, 2021
[Support Guide] Tips for bringing your own custom SSL certificates to Netlify Support Guides netlify-dns-https-ssl , support-guide	9	10031	November 28, 2024
Certificate issue for my website sparkstorm.ai Support building , deployment	2	25	March 11, 2025
Not generating SSL certifications for custom/imported domain from other domain provider Support netlify-dns-https-ssl	5	659	May 14, 2020
Unable to receive TLS certificate for custom domain from OVH Support netlify-dns-https-ssl	2	78	January 9, 2025

OCSP stapling and OCSP Must-Staple

Related topics