Free OCSP Stapling Checker

Nginx

server {
    listen 443 ssl;
    ssl_certificate     /etc/ssl/fullchain.pem;
    ssl_certificate_key /etc/ssl/privkey.pem;

    ssl_stapling on;
    ssl_stapling_verify on;
    ssl_trusted_certificate /etc/ssl/chain.pem;
    resolver 1.1.1.1 8.8.8.8 valid=300s;
    resolver_timeout 5s;
}

Apache

# httpd.conf / ssl.conf
SSLUseStapling           on
SSLStaplingResponderTimeout 5
SSLStaplingReturnResponderErrors off
SSLStaplingCache         shmcb:/var/run/ocsp(128000)

Node.js (Express + https)

import https from "node:https"
import fs from "node:fs"
import express from "express"
import ocsp from "ocsp"

const app = express()
const cache = new ocsp.Cache()

const server = https.createServer(
  {
    cert: fs.readFileSync("fullchain.pem"),
    key: fs.readFileSync("privkey.pem"),
  },
  app,
)

server.on("OCSPRequest", (cert, issuer, cb) => {
  ocsp.getOCSPURI(cert, (err, uri) => {
    if (err) return cb(err)
    if (uri === null) return cb()
    const req = ocsp.request.generate(cert, issuer)
    cache.request(req.id, { url: uri, ocsp: req.data }, cb)
  })
})

server.listen(443)