Edge SWG support of DigiCert OCSP Requests
Article ID: 409853
Updated On:
Products
Issue/Introduction
DigiCert will be discontinuing HTTP/1.0 for OCSP revocation checks. You want to know if the Edge SWG (ProxySG) will be affected.
Cause
DigiCert announced an end to HTTP/1.0 connections without the HTTP host header for OCSP and CRL certificate status verification checks, originally scheduled for September 8, 2025, but now delayed until September 22, 2025. While Edge SWG currently uses HTTP/1.0 for OCSP requests, DigiCert has confirmed that their OCSP responder will continue to support HTTP/1.0 requests provided they include a proper HOST header.
Resolution
We have confirmed that based on current information, and confirmation from DigiCert, that Edge SWG appliances running current SGOS releases will not be affected by DigiCert's ending of HTTP/1.0 support for OCSP requests without the HTTP Host header.
The Edge SWG OCSP requests use the HTTP Host header and hence, will not be affected.
Therefore, no action is required on the Edge SWG.
Additional Information
Feedback
