Online Certificate Status Protocol (OCSP) is a protocol used for validation of x509 certificates in a PKI system. Most OCSP implementations ingest certificate revocation lists (CRLs) from Certificate Authorities (CAs), create an internally signed database called a proof set, and then produce OCSP ...

learn more… | top users | synonyms

1
vote
1answer
86 views

Adding OCSP and NDES into existing environment? What can be installed together?

Currently have one offline CA and one Sub Issuing CA that just has the Web Enrollment installed. Looking at also implementing NDES and OCSP. I know the web enrollment can be installed on the Issuing ...
-1
votes
1answer
72 views

Problem with TLS identity not verified

I run a CA server "Microsoft CA Server Enterprise" and I generate certificates then bind the cert to my site. In all clients in my network, I add the cert with certutil -addstore ca org.cer When my ...
3
votes
0answers
57 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
3
votes
0answers
5k views

OpenSSL: how to setup an OCSP server for checking third-party certificates?

I am testing the Certificate Revocation functionality of a CMTS device. This requires me to setup a OCSP responder. Since it will only be used for testing I assume that the minimal implementation ...
0
votes
0answers
6 views

IIS ocsp stapling - no response

I have a certificate that is configured in IIS in windows server 2012 with ocsp_uri. When I test the server for oscp stapling there is no response: openssl s_client -connect example.com:443 -tls1 ...
0
votes
0answers
41 views

Apache + Jboss checking the X.509 certificate status

I am developing a web app using Apache http + Jboss + AJP Protocol. Users authenticate using their X.509 certificate, stored in their smartcards. When browser asks the users for their cards PIN they ...
0
votes
0answers
405 views

Apache stapling_renew_response: responder error

My Apache error log shows a lot of " stapling_renew_response: responder " errors. Was hoping to add a browser screenshot but I'm a newbie and therefore not authorised. This is what is shown from the ...