AnsweredAssumed Answered

Testing OCSP stapling with and without SNI

Question asked by Franz Ombler on Sep 1, 2016
Latest reply on Sep 2, 2016 by Franz Ombler

https://sni.1000minds.com and https://no-sni.1000minds.com are on the same server using the same certificate.

A stapled OCSP response is seen for both sites using openssl:

openssl s_client -connect sni.1000minds.com:443 -tls1 -tlsextdebug  -status  openssl s_client -connect no-sni.1000minds.com:443 -tls1 -tlsextdebug  -status 

ssllabs reports OCSP stapling is disabled for the sni site and enabled for the no-sni site:

A bug in the test suite?

Outcomes