Articles in Root

In which browsers is OCSP (Online Certificates Status Protocol) supported in?

Problem

In which browsers is OCSP (Online Certificates Status Protocol) supported in?

Solution

OCSP (Online Certificate Status Protocol) is an internet protocol that checks the status of a certificate as an alternative to the CRL (Certificate Revocation Lists).  It is described in RFC 2560.  OCSP is a real-time check of the status of a certificate and is fundamental in the design of EV SSL certificates.   This knowledge base articles describes the support for OCSP in various browsers.

Opera

OCSP is supported by Opera 8.0 and above.

Firefox

OCSP is supported in Firefox 2 and above, however it is not enabled by default.  OCSP can be enabled manually by selecting the “Use OCSP to validate only certificates that specify an OCSP service URL.”  As a side note, Firefox 2 did not support the green EV SSL bar at this build; regardless of the OCSP option selected.

OCSP is enabled by default in Firefox version 3.

Internet Explorer

OCSP is not supported by default in Internet Explorer 6.  Internet Explorer 7 and above supports OCSP.  OCSP is natively built into Windows Vista and Windows 7.

Safari

OCSP is supported in Safari on Mac OS X however it is not enabled by default.  OCSP can be enabled manually within the Keychain preferences. 

In Mac OS X 10.7 (Lion), it is enabled by default.

Chrome

Google Chrome supports OCSP checking.