Does .NET support OCSP stapling configured on Apache web server?

Captain_Lou 26 Reputation points
2020-12-09T21:47:30.62+00:00

Our .NET 3.5 application uses the HttpWebRequest class to establish TLS connections to hosted backend services and it does not make use of our Apache web server's stapled response (to confirm whether or not the SSL certificate is valid). The application performs the CRL or OCSP call on its own.

We can’t find any information which states whether or not .NET WebClient, HttpClient or HttpWebRequest classes support OCSP stapling configured in Apache server.

I confirmed that various web browsers (Edge, Chrome and Firefox) triggered Apache to make calls to the OCSP responder when they hit the Apache page.

Since that worked, we are trying to determine why our .NET 3.5 application accessing the same Apache server does not invoke the OCSP stapling.

Are there any settings within .NET 3.5 that need to be set?

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
35,995 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Bruce Zhang-MSFT 3,736 Reputation points
    2020-12-10T09:02:38.007+00:00

    Hi @Captain_Lou ,

    Your problem is the compatibility of Apache server to .net, not the cause of .net, and do not belong to the scope of IIS. It is recommended that you go to the Apache server related forums to get help.

    If the answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our  documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Best regards,
    Bruce Zhang