cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

OCSP Staping on SSL Labs is a NO. OpenSSL states yes

I host my servers at home.  Ubuntu 20.04, OpenSSL 1.1.1g, Apache 2.4.43.  I use Godaddy 5 cert SSL certifcates.  SSL Labs Godaddy test and SSL Labs test show OCSP Stapling as NO.  All 7 virtual hosts get quick results.   When I test on their site, I get NO.   I followed numerous articles on OCSP Stapling on Apache.   Error.logs show no errors.   Apachectl -t shows no errors.  Below is how they recommend testing for OCSP Stapling. 

echo QUIT | openssl s_client -connect wp.scsiraidguru.com:443 -status 2> /dev/null | grep -A 17 'OCSP response:' | grep -B 17 'Next Update'
OCSP response:
======================================
OCSP Response Data:
OCSP Response Status: successful (0x0)
Response Type: Basic OCSP Response
Version: 1 (0x0)
Responder Id: C = US, ST = Arizona, L = Scottsdale, O = GoDaddy Inc., CN = Go Daddy Validation Authority - G2
Produced At: Jun 3 14:19:40 2020 GMT
Responses:
Certificate ID:
Hash Algorithm: sha1
Issuer Name Hash: xxxxxxxxxxxxx
Issuer Key Hash: xxxxxxxxxxxxx
Serial Number: xxxxxxxxxxxxx
Cert Status: good
This Update: Jun 3 14:19:40 2020 GMT
Next Update: Jun 5 02:19:40 2020 GMT

0 REPLIES 0