I can't have OCSP with my current OS licensing (2008 R2 Standard) but I need this option. I'm hoping to avoid shelling out an additional $2300.

Are there any open source products that could act as an OCSP responder for my existing internal Microsoft CA? I've seen several options for a complete CA but nothing in the way of MS integration.

Failing something prebuilt what kind of output would I need to pump back from an IIS instance to emulate a success?

link|improve this question

feedback

1 Answer

up vote 1 down vote accepted

Google for "OCSP RFC 2560 OpenSource". There seem to be solutions for this out there. Emulating a success seems to be easy, since OSCP responders can be simulated by replay attacks (according to the WiKi) The details are outlined in RFC 2560.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.