Bypass OCSP for certain hosts

Thanks for the response. I intended to follow up but this fell through the cracks as it turned into a dead issue.

 

 

You are correct that we did require client certificates and I had initially considered your suggestion. However, we needed the cert to come through the handshake so that we could then extract the identity of the user. So this was a backwards situation really - needing to use OCSP with the exception of one bad certificate that shouldn't pass anyway.

 

 

It was a band-aid attempt. We finally found someone to take care of the cert and all was well.

 

Thanks.