---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce OCSP check on network error \[New in Security Center 1.3 and updated in 2.0\]

# Enforce OCSP check on network error \[New in Security Center 1.3 and updated in 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Learn how to configure the com.glide.communications.httpclient.ocsp_allow_network_error property to prevent bad actors from bypassing Online Certificate Status Protocol (OCSP) checks.
If com.glide.communications.httpclient.ocsp_allow_network_error is not set to the recommended value of false, and the Online Certificate Status Protocol (OCSP) check encounters a network error (for example, a
timeout or problem fetching the revocation information), it will bypass the OCSP security check and consider it successful. This could allow an attacker with a revoked certificate to break the Public Key infrastructure (PKI) and
digital certificate trust that is foundational to the web. The use of revoked certificates is often an indicator of malicious activity unless the servers are out of sync.

Ensure the property
com.glide.communications.httpclient.ocsp_allow_network_error exists
and is set to false. If the property does not appear in the sys_properties table, add a new
record.

## More information {#sc-enforce-ocsp-check-on-network-error__section_qhx_1b1_xwb}

{#sc-enforce-ocsp-check-on-network-error__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.communications.httpclient.ocsp_allow_network_error |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | true |
| Category | [Communications](https://servicenow-prod.fluidtopics.net/KYWXOfqNUW0uNGo3zippJA "This control ensures proper encryption using strong algorithms and ciphers. This includes ensuring the recommended version of TLS is used for client connectivity, use of strong cipher suites, use of trusted and signed certificates, ensuring connections are encrypted between components and logging of connection failures.") |
| Security risk | * Severity score: 5.9 * CVSS score: Medium * Security risk details: Not setting this property to false could enable a bad actor to bypass the OCSP security check. {#sc-enforce-ocsp-check-on-network-error__ul_ihv_dvg_1xb} |
| Dependencies and prerequisites | None |
| Functional impact | This property determines whether a request against the Authority Information Access (AIA) Online Certificate Status Protocol (OCSP) uri results in a pass or fail outcome in the event of a connection or timeout error. When set to false, the revocation status of the presented server certificate can't be validated and will lead to a communication failure with that endpoint. If a network error occurs when the property is set to its default value of true, the certificate is treated as valid from a revocation standpoint. |
[ ]

{#sc-enforce-ocsp-check-on-network-error__table_ajc_b43_3kb}