title: AWS OCSP Stapling
body: <p>After creating an OCSP server via Python3.6 + Lambda + Serverless + DynamoDB + S3 and OpenSSL it has become necessary to support <code>OpenSSL --version</code> of <code>1.1</code> which supports the multiple <code>-cert</code> options, thus reducing overhead and network requests. </p>
  
  <p>With <code>print('Openssl version in lambda:', ssl.OPENSSL_VERSION)</code> I can see that the installed version is: <code>OpenSSL 1.0.0-fips 29 Mar 2010</code>. How feasible it is to upgrade the version on <code>AWS Lambda</code>?</p>
  
  <p>Also can <code>OCSP Stapling</code> disussed here: <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/RequestAndResponseBehaviorCustomOrigin.html#request-custom-ocsp-stapling" rel="nofollow noreferrer">https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/RequestAndResponseBehaviorCustomOrigin.html#request-custom-ocsp-stapling</a> be used in the set up above to reduce network requests and load? </p>