From 59a6c707601df1adf8f49f9420e046df0d74da52 Mon Sep 17 00:00:00 2001
From: Max <max@users.noreply.github.com>
Date: Mon, 18 May 2026 08:56:31 +0000
Subject: [PATCH] fix: change OCSP stapling display from pass/fail to
 informational
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The OCSP Stapling row in the TLS Connection card used the yesNo()
helper, rendering '❌ No' when the server doesn't staple OCSP
responses. Since OCSP stapling is a performance optimization rather
than a security requirement, displaying it as a failure is misleading.

Replaced with a neutral ocspStatus() that shows 'Yes' or 'Not enabled'
without emoji icons. The analysis rule (tls-connection.ts) already
uses severity 'info' for this check, so the Advisory panel was
correct; only the card display was wrong.

Closes #299
---
 src/client/components/Results/TlsConnection.tsx | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/client/components/Results/TlsConnection.tsx b/src/client/components/Results/TlsConnection.tsx
index dee9efb9..8aa064c0 100644
--- a/src/client/components/Results/TlsConnection.tsx
+++ b/src/client/components/Results/TlsConnection.tsx
@@ -3,6 +3,8 @@ import Row from 'client/components/Form/Row';
 
 const yesNo = (v: boolean) => (v ? '✅ Yes' : '❌ No');
 
+const ocspStatus = (v: boolean) => (v ? 'Yes' : 'Not enabled');
+
 const formatEphemeralKey = (k: any): string => {
   if (!k?.type) return '';
   const parts = [k.type];
@@ -28,7 +30,7 @@ const TlsConnectionCard = (props: {
       {d.alpnProtocol && <Row lbl="ALPN" val={d.alpnProtocol} />}
       <Row lbl="Forward Secrecy" val={yesNo(!!d.forwardSecrecy)} />
       <Row lbl="Session Resumption" val={yesNo(!!d.sessionResumption)} />
-      <Row lbl="OCSP Stapling" val={yesNo(!!d.ocspStapled)} />
+      <Row lbl="OCSP Stapling" val={ocspStatus(!!d.ocspStapled)} />
       <Row
         lbl="Certificate Trust"
         val={d.authorized ? '✅ Trusted' : `❌ ${d.authError || 'Untrusted'}`}