1. Windows 注册表修改
1
2
3
4
5
[HKLM\Sysytem\CurrentControlSet\Control\SecurityProviders\SCHANNEL]

To this subkey, add the following key:

"EnableOcspStaplingForSni"=dword:00000001
  1. 配置Host
1
2
23.219.39.212 ocsp.int-x3.letsencrypt.org
23.219.172.114 ocsp.int-x3.letsencrypt.org
  1. 重启服务器

  2. 检查OSCP是否开启:

https://www.getssl.cn/ocsp