---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce OCSP check on network error

# Enforce OCSP check on network error {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Learn how to configure the com.glide.communications.httpclient.ocsp_allow_network_error property to prevent bad actors from bypassing Online Certificate Status Protocol (OCSP) checks.
If the com.glide.communications.httpclient.ocsp_allow_network_error system property is not explicitly set to the recommended value of false, and the OCSP (Online Certificate Status
Protocol) check encounters a network-related issue, such as a timeout or failure to retrieve revocation data, the system will treat the OCSP validation as successful by default.

Ensure the property com.glide.communications.httpclient.ocsp_allow_network_error exists and is set to false. If the property does not appear in the System Properties \[sys_properties\] table, add a new
record.

## More information {#sc-enforce-ocsp-check-on-network-error__section_qhx_1b1_xwb}

{#sc-enforce-ocsp-check-on-network-error__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.communications.httpclient.ocsp_allow_network_error |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | \<none\> |
| Fallback value | true |
| Category | [Communications](https://www.servicenow.com/docs/ul5KpPGZs1A3ijpW_v_lwg "This control ensures proper encryption using strong algorithms and ciphers. This includes ensuring the recommended version of TLS is used for client connectivity, use of strong cipher suites, use of trusted and signed certificates, ensuring connections are encrypted between components and logging of connection failures.") |
| Security risk | * Severity score: 5.9 * CVSS score: Medium * Security risk details: An attacker using a revoked certificate could exploit this by simply omitting the OCSP response during a connection attempt. In such cases, the client would incorrectly accept the revoked certificate as valid, thereby undermining the integrity of the Public Key Infrastructure (PKI) and the trust model that underpins secure web communications. The use of revoked certificates is often indicative of malicious activity, unless attributable to temporary synchronization issues between certificate authorities and OCSP responders. {#sc-enforce-ocsp-check-on-network-error__ul_ihv_dvg_1xb} |
| Dependencies and prerequisites | None |
| Functional impact | This property determines whether a request against the Authority Information Access (AIA) Online Certificate Status Protocol (OCSP) uri results in a pass or fail outcome in the event of a connection or timeout error. When set to false, the revocation status of the presented server certificate can't be validated and will lead to a communication failure with that endpoint. If a network error occurs when the property is set to its default value of true, the certificate is treated as valid from a revocation standpoint. |
[ ]

{#sc-enforce-ocsp-check-on-network-error__table_ajc_b43_3kb}