OCSP Stapling support for Kestrel

[Tratcher]

From @rsrinivasanhome on January 5, 2018 13:28

Does Kestrel Support OCSP Stapling ? I am not able to find any links on google.

Copied from original issue: aspnet/AspNetCoreModule#283

[samsosa]

No, Kestrel doesn't support OCSP Stapling but Microsoft IIS since version 8.0 use this configuration by default.

[muratg]

After chatting with @shirhatti, putting this tentatively in 3.0.0.

[muratg]

cc @blowdart

[zigszigsdk]

I assume that this was not added in 3.0.0. Any idea when we'll see it?

[Tratcher]

No, it's on the backlog. What scenarios would this unblock for you?

Do we have a design proposal for this? As a TLS feature would this require changes to SslStream?

[zigszigsdk]

It's not currently a block for anything. I was looking into a site-report from https://www.ssllabs.com/, and wanted to see if I could simply just do it. As this thread was the first proper that popped up, and still lacked an update since 3.0.0 was released, I thought it was proper to request an update - since others might also find this thread as I did.

[Tratcher]

Depends on SslStream dotnet/runtime#33377