ocsp stapling

So far I couldn't find a solution to allow OCSP lookups for OCSP stapling in a locked down environment, e.g. with an outbound firewall configured. Explicitly allowing outgoing requests for OCSP responders is not an option, as IPs for these are not static and can rapidly change (see for example...

I've been battling with this for a couple of days but i think i finally narrowed it down ... Centos7 , OLS 1.4.27 , I tied both rpm installs and build from source, same issue. https access to a vhost which has OCSP Stapling on, will work ok for the first few requests and i can see the entry...