• Let's Encrypt sets date for ending OCSP support

    From LWN.net@1337:1/100 to All on Thursday, December 05, 2024 19:30:05
    Let's Encrypt sets date for ending OCSP support

    Date:
    Thu, 05 Dec 2024 19:22:44 +0000

    Description:
    In July, Let's Encrypt announced it was ending
    support " as soon as possible " for the Online
    Certificate Status Protocol (OCSP) in favor of Certificate
    Revocation Lists (CRLs) due to privacy concerns. The organization
    has now announced that it has set a timeline, and will be turning off its OCSP responders on August6, 2025. There is additional action required
    for Let's Encrypt users who use the OCSP Must Staple Extension: As of January 30, 2025, issuance requests that include the OCSP
    Must Staple extension will fail, unless the requesting account has
    previously issued a certificate containing the OCSP Must Staple
    extension. As of May 7, all issuance requests that include the OCSP Must
    Staple extension will fail, including renewals. Please change your
    ACME client configuration to not request the extension.

    ======================================================================
    Link to news story:
    https://lwn.net/Articles/1000941/


    --- Mystic BBS v1.12 A47 (Linux/64)
    * Origin: tqwNet UK HUB @ hub.uk.erb.pw (1337:1/100)