EdgeNext Documentation

OCSP Stapling is a performance and security enhancement for HTTPS that allows the server to cache and "staple" the certificate's revocation status during the TLS handshake. This eliminates the need for the browser to contact the Certificate Authority (CA) separately to verify whether the SSL certificate has been revoked, resulting in faster page loads and better privacy.

Prerequisites

Before enabling this feature, make sure that an HTTPS certificate has been successfully configured. For instructions, refer to Configure HTTPS Certificate.

Configuration Guide

Scenario 1: Global Domain Configuration

1. Log in to the Security CDN Console.

2. In the left navigation pane, go to Speed & Cache, then clickAcceleration to open the Global Acceleration Policy page.

   
   

3. Scroll down to the OCSP Stapling module.

   
   

4. Toggle the switch. A confirmation dialog will appear.

   
   

5. Click OK to save the global OCSP Stapling configuration.

Scenario 2: Domain Acceleration Template Configuration

1. Log in to the Security CDN Console.

2. In the left navigation pane, go to Speed & Cache, then click Acceleration.

3. At the top, click Domain Acceleration Template Configuration to access the Template Management page.

4. Locate the desired template and click Policy Management in the operations column.

5. Scroll down to find the HTTPS - OCSP Stapling module.

   
   

6. Toggle the switch. A confirmation dialog will appear.

   
   

7. Click OK to save the OCSP Stapling configuration for the selected template.