-
Type: Improvement
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
The OCSP documentation in the Configuring TLS page is unnecessarily verbose regarding interactions OCSP behavior. The spec only requires noting exceptions, so likely some of the interactions can be removed, like "Stapled OCSP responses are validated on certificates presented by the server"
Also OpenSSL still says "is partially supported". But OCSP is fully supported with OpenSSL 1.0.1+.