k6 icon indicating copy to clipboard operation
k6 copied to clipboard

Use self-hosted solution for OCSP stapling check

Open na-- opened this issue 5 years ago • 1 comments

As seen in https://github.com/loadimpact/k6/issues/537#issuecomment-374920627 and https://github.com/loadimpact/k6/pull/1274, the current solution for testing OCSP statuses is very sub-optimal. Ideally, we shouldn't depend on any external resources to run the test...

na-- avatar Dec 13 '19 16:12 na--

This test now started failing on GHA for no apparent reason, likely due to wikipedia gettign resolved to something different.

I have disabled the test fo now so that CI works

mstoykov avatar Jun 20 '25 07:06 mstoykov

Hey @mstoykov,

Do you have any updates here?

I tried to follow the tutorial here: https://grafana.com/docs/k6/latest/using-k6/protocols/ssl-tls/online-certificate-status-protocol-ocsp/ but it doesn't look like this is working as intended.

This is what I get if I am getting in the console.log

INFO[0000] {"produced_at":0,"this_update":0,"next_update":0,"revoked_at":0,"revocation_reason":"","status":"unknown"}  source=console

monteiro-renato avatar Nov 14 '25 11:11 monteiro-renato

From my experience, most sites stopped doing OCSP stapling. Including everything we used to test. I just tried and cloudflare.com is the only thing I tried that has ocsp and the code works with it.

So in your case I will expect that the site you are testing with just doesn't have OCSP stapling :(

mstoykov avatar Nov 14 '25 12:11 mstoykov