# OCSP validation of client certificates

**URL:** <https://www.ruby-forum.com/t/ocsp-validation-of-client-certificates/238313>\
**Category:** NGINX\
**Created:** [January 2, 2014, 11:04pm UTC](https://www.ruby-forum.com/t/ocsp-validation-of-client-certificates/238313 "2014-01-02T23:04:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![musicdenotation](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/ea666f/32.png) [@musicdenotation](https://www.ruby-forum.com/u/musicdenotation)\
**Post date:** [January 2, 2014, 11:04pm UTC](https://www.ruby-forum.com/t/ocsp-validation-of-client-certificates/238313/1 "2014-01-02T23:04:15Z")

</div>

Hi Forum,  
I see that nGinx supports configuration to perform OCSP  
validation of  
server side certificates and staple the validation response to the  
client.  
My question is whether nGinx supports OCSP validation of client  
presented  
certificates.

I seem to hit a dead end with documentation for that question. Would be  
helpful if someone could answer this.

Thanks in advance for your time.

Posted at Nginx Forum:

> **[OCSP validation of client certificates](https://forum.nginx.org/read.php?2,245958,245958#msg-245958)**
>
> Hi Forum, I see that nGinx supports configuration to perform OCSP validation of server side certificates and staple the validation response to the client. My question is whether nGinx supports OCSP validation of client presented certificates. I seem...

---

<div class="post-metadata">

**Author:** ![nginx\_developer](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/n/4bbf92/32.png) [@nginx\_developer](https://www.ruby-forum.com/u/nginx_developer)\
**Post date:** [January 3, 2014, 4:18am UTC](https://www.ruby-forum.com/t/ocsp-validation-of-client-certificates/238313/2 "2014-01-03T04:18:01Z")

</div>

Hello!

On Thu, Jan 02, 2014 at 05:03:36PM -0500, nginx\_developer wrote:

> Hi Forum,  
> I see that nGinx supports configuration to perform OCSP validation of  
> server side certificates and staple the validation response to the client.  
> My question is whether nGinx supports OCSP validation of client presented  
> certificates.
> 
> I seem to hit a dead end with documentation for that question. Would be  
> helpful if someone could answer this.

No. Only explicitly loaded CRLs are supported, see  
[Module ngx\_http\_ssl\_module](http://nginx.org/r/ssl_crl).

–  
Maxim D.  
[http://nginx.org/](http://nginx.org/)