Which option in an Apache HTTPD configuration file enables OCSP stapling?

Which option in an Apache HTTPD configuration file enables OCSP stapling?

• A. SSLUseACME
• B. SSLUseStapling
• C. SSLStapling
• D. SSLRequestChallenge

Answer: (B)

Enabling OCSP (Online Certificate Status Protocol) stapling in an Apache HTTPD configuration file is essential for improving the efficiency and privacy of certificate status checks. The correct option allows Apache to send OCSP responses along with the TLS handshake, meaning the client does not have to query the certificate authority directly, thus reducing latency and enhancing privacy. The term "SSLUseStapling" is specifically designed to activate this feature within the server's SSL module. By setting this directive to "on," it instructs Apache to include the OCSP response in the TLS handshake, streamlining the process while ensuring secure and timely verification of certificate statuses. Understanding the importance of OCSP stapling helps optimize web server configurations for better security performance, as well as compliance with modern security standards. Other terms listed in the choices do not relate directly to OCSP stapling; thus, they would not achieve the intended result.

Enabling OCSP (Online Certificate Status Protocol) stapling in an Apache HTTPD configuration file is essential for improving the efficiency and privacy of certificate status checks. The correct option allows Apache to send OCSP responses along with the TLS handshake, meaning the client does not have to query the certificate authority directly, thus reducing latency and enhancing privacy.

The term "SSLUseStapling" is specifically designed to activate this feature within the server's SSL module. By setting this directive to "on," it instructs Apache to include the OCSP response in the TLS handshake, streamlining the process while ensuring secure and timely verification of certificate statuses.

Understanding the importance of OCSP stapling helps optimize web server configurations for better security performance, as well as compliance with modern security standards. Other terms listed in the choices do not relate directly to OCSP stapling; thus, they would not achieve the intended result.