August 2017
Intermediate to advanced
278 pages
8h 53m
English
In order to use OCSP stapling, we need to add two additional lines to our server directive:
ssl_stapling on; ssl_stapling_verify on;
This means that the server is now responsible for the initial OCSP lookup and will then send every subsequent request with the cached result.
We can verify that this is working with the Qualys SSL Server Test, and we should be looking for the following:
CloudFlare (a content distribution and website performance platform) claims that OCSP stapling saves up to 30 percent of the SSL negotiation time, so enabling this is key for maximizing website performance.
Read now
Unlock full access