JDK-8237373 : Client-side OCSP stapling for JSSE
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Priority: P3
  • Status: Open
  • Resolution: Unresolved
  • Submitted: 2020-01-16
  • Updated: 2020-01-31
Related Reports
CSR :  
Relates :  
Description
TLS 1.3 supports client-side OCSP stapling when a server places the status_request in a CertificateRequest message it sends to the client.  This feature would implement the client-side ability to staple OCSP responses and send them to a server.  It also implements the server-side support for asserting the status_request extension in TLS 1.3 CertificateRequest messages and the proper evaluation of stapled OCSP responses when provided by the client.