Article 6SQPM Let's Encrypt sets date for ending OCSP support

Let's Encrypt sets date for ending OCSP support

by
jzb
from LWN.net on (#6SQPM)

In July, Let's Encrypt announced it was endingsupport "as soon as possible" for the OnlineCertificate Status Protocol (OCSP) in favor of CertificateRevocation Lists (CRLs) due to privacy concerns. The organizationhas now announcedthat it has set a timeline, and will be turning off its OCSPresponders on August6, 2025. There is additional action requiredfor Let's Encrypt users who use the OCSP Must Staple Extension:

As of January 30, 2025, issuance requests that include the OCSPMust Staple extension will fail, unless the requesting account haspreviously issued a certificate containing the OCSP Must Stapleextension.

As of May 7, all issuance requests that include the OCSP MustStaple extension will fail, including renewals. Please change yourACME client configuration to not request the extension.

External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments