Forum Discussion

Ryan_01_132451's avatar
Ryan_01_132451
Historic F5 Account
Sep 16, 2014

TLS Multi Certificate Status Extention

Anyone know of plans to support the TLS extensions?: “The Transport Layer Security (TLS) Multiple Certificate Status Request Extension RFC 6961”

 

I know in release 11.6.0 F5 supports OCSP Stapling but that initial standard does not include stapling messages for intermediate certificates, only the root certificate.

 

BIG-IQ

1 Reply

Sort By
  • David_Holmes_9's avatar
    David_Holmes_9
    Historic F5 Account
    Sep 16, 2014

    We had discussed this internally. As far as we are aware, no browsers support multi-stapling yet, which would make interop testing quite challenging. With finite resources and finite time to make a decision we chose to implement at least single stapling with the hope that we could join the party when the browsers start switching to multi.