com.glide.communications.httpclient.ocsp_allow_network_error

Attributes

  • Sys ID: nan
  • Type: true | false
  • Application: Global
  • Default value: true
AI Logo

AI generated property description:

The ServiceNow property com.glide.communications.httpclient.ocsp_allow_network_error determines how the system handles network errors during Online Certificate Status Protocol (OCSP) checks for SSL/TLS certificates. Its default value is true, which means that if a network error occurs while contacting the OCSP responder, the certificate is treated as valid and communication is allowed to continue. Setting this property to false enforces stricter validation by treating a network error as a failed certificate check, effectively blocking the connection. Administrators configure this property in the context of security and compliance, as disabling the allowance of network errors strengthens protection against revoked certificates but may cause disruptions if the OCSP responder is temporarily unreachable. The choice often balances system availability with security requirements, with stricter environments preferring false to minimize risks of accepting compromised certificates.

Source

Related property: com.glide.communications.httpclient.verify_hostname