diff --git a/internal/web/actions/default/servers/server/settings/https/index.go b/internal/web/actions/default/servers/server/settings/https/index.go
index 4349b781..b063a43c 100644
--- a/internal/web/actions/default/servers/server/settings/https/index.go
+++ b/internal/web/actions/default/servers/server/settings/https/index.go
@@ -143,6 +143,7 @@ func (this *IndexAction) RunPost(params struct {
 				MinVersion:        sslPolicy.MinVersion,
 				SslCertsJSON:      certsJSON,
 				HstsJSON:          hstsJSON,
+				OcspIsOn:          sslPolicy.OCSPIsOn,
 				ClientAuthType:    types.Int32(sslPolicy.ClientAuthType),
 				ClientCACertsJSON: clientCACertsJSON,
 				CipherSuitesIsOn:  sslPolicy.CipherSuitesIsOn,
@@ -158,6 +159,7 @@ func (this *IndexAction) RunPost(params struct {
 				MinVersion:        sslPolicy.MinVersion,
 				SslCertsJSON:      certsJSON,
 				HstsJSON:          hstsJSON,
+				OcspIsOn:          sslPolicy.OCSPIsOn,
 				ClientAuthType:    types.Int32(sslPolicy.ClientAuthType),
 				ClientCACertsJSON: clientCACertsJSON,
 				CipherSuitesIsOn:  sslPolicy.CipherSuitesIsOn,
diff --git a/internal/web/actions/default/servers/server/settings/tls/index.go b/internal/web/actions/default/servers/server/settings/tls/index.go
index d6afaa2c..a4b6ba4f 100644
--- a/internal/web/actions/default/servers/server/settings/tls/index.go
+++ b/internal/web/actions/default/servers/server/settings/tls/index.go
@@ -128,6 +128,7 @@ func (this *IndexAction) RunPost(params struct {
 				MinVersion:        sslPolicy.MinVersion,
 				SslCertsJSON:      certsJSON,
 				HstsJSON:          hstsJSON,
+				OcspIsOn:          sslPolicy.OCSPIsOn,
 				ClientAuthType:    types.Int32(sslPolicy.ClientAuthType),
 				ClientCACertsJSON: clientCACertsJSON,
 				CipherSuitesIsOn:  sslPolicy.CipherSuitesIsOn,
@@ -143,6 +144,7 @@ func (this *IndexAction) RunPost(params struct {
 				MinVersion:        sslPolicy.MinVersion,
 				SslCertsJSON:      certsJSON,
 				HstsJSON:          hstsJSON,
+				OcspIsOn:          sslPolicy.OCSPIsOn,
 				ClientAuthType:    types.Int32(sslPolicy.ClientAuthType),
 				ClientCACertsJSON: clientCACertsJSON,
 				CipherSuitesIsOn:  sslPolicy.CipherSuitesIsOn,
diff --git a/web/public/js/components/server/ssl-config-box.js b/web/public/js/components/server/ssl-config-box.js
index 52df15c0..0ab7c999 100644
--- a/web/public/js/components/server/ssl-config-box.js
+++ b/web/public/js/components/server/ssl-config-box.js
@@ -21,7 +21,8 @@ Vue.component("ssl-config-box", {
 				hsts: null,
 				cipherSuitesIsOn: false,
 				cipherSuites: [],
-				http2Enabled: true
+				http2Enabled: true,
+				ocspIsOn: false
 			}
 		} else {
 			if (policy.certRefs == null) {
@@ -498,6 +499,14 @@ Vue.component("ssl-config-box", {
 				</td>
 			</tr>
 			
+			<!-- OCSP -->
+			<tr>
+				<td>OCSP Stapling</td>
+				<td><checkbox name="ocspIsOn" v-model="policy.ocspIsOn"></checkbox>
+					<p class="comment">选中表示启用OCSP Stapling。</p>
+				</td>
+			</tr>
+			
 			<!-- 客户端认证 -->
 			<tr>
 				<td>客户端认证方式</td>