Stack Overflow
Stack Overflow

Questions tagged [ocsp]

Online Certificate Status Protocol

Standardized by IETF RFC 2560, the PKIX Online Certificate Status Protocol defines a protocol for requesting the revocation status of a digital certificate.

210 questions
4
votes
1 answer

Checking certificate validity for a specific time

I am curently working with a system, that has PDF signing option. Now, when creating a complementary Android application, I've run into a bit of a conundrum: How do I check the validity of the certificate? The problem is, that I'm interested…
Janis Peisenieks
  • 4,938
  • 10
  • 55
  • 85
3
votes
1 answer

False Positive SSL "Peer's Certificate Has Been Revoked" on Firefox Only

One of my client's is having a problem that is vexing both their system admin and godaddy support, who say that everything is correct and this error should not be happening. Their SSL certificate is valid and seems to be correctly…
Jonah
  • 15,806
  • 22
  • 87
  • 161
3
votes
5 answers

OCSP command-line test tool?

Does anybody know of a tool to test OCSP responses? Preferably, something that can be used from a Windows Command-line and/or can be included (easily) in a Java/python program
Jjarava
3
votes
1 answer

How to create an OCSP request and validate response using Azure APIM?

As recommended over here, I am toying with enabling Azure API Management (APIM) as a way to reduce unwanted traffic to an HTTP-triggered Azure Function. The idea is to use APIM as a means to force the endpoint server (managed by Microsoft) to reject…
ericOnline
  • 1,586
  • 1
  • 19
  • 54
3
votes
1 answer

RFC2560 vs RFC5019

I read some documents about RFC2560 and RFC5019. I realized that both of them are for OCSP to check validity of a certificate but i could not find any differences between them.
Leon
  • 198
  • 8
3
votes
1 answer

Correct usage of OCSP_basic_verify() in openssl?

I have been referencing https://github.com/openssl/openssl/blob/master/apps/ocsp.c to create my own OCSP implementation and to verify the OCSP Basic response once I receive it from OCSP responder. But somehow ,each iteration I run, I keep getting…
learn_develop
  • 1,735
  • 4
  • 15
  • 33
3
votes
1 answer

How to enable OCSP in X509TrustManager?

System.setProperty("com.sun.net.ssl.checkRevocation", "true"); Security.setProperty("ocsp.enable", "true"); Is setting these properties really sufficient to enable OCSP? If so, then why we need bouncy castle OCSP support instead of just setting…
mdavid
  • 563
  • 6
  • 20
3
votes
1 answer

OCSP response parsing error. Error while BER Decoding

I am trying to add an OCSP Response to a PDF document that I am signing with Bouncy Castle using CmsSignedDataGenerator I think I'm embedding the OCSP response correctly but when I open the document in Adobe Reader 11 (offline) and check Signature…
Fernando Gonzalez
  • 138
  • 1
  • 8
3
votes
2 answers

OCSP unknown status when passing cert, good status when passing serial

Okay, so I have a multi-layered ca system that looks like this: -ROOT_CA ----intermediate_CA --------intermediate_CA2 ------------client certs... I have an OCSP responder set up on intermediate_CA2 that is started like so: $ openssl ocsp -index…
jonbonazza
  • 926
  • 2
  • 10
  • 16
3
votes
1 answer

"OCSP server has no status for the certificate" after Firefox upgrade

I have a problem with this site: https://shop.angst-pfister.ch/ With Firefox 19.0 everything was ok, but after upgrading to 19.0.2 I get this error message: The OCSP server has no status for the certificate. (Error code: …
GarfieldKlon
  • 11,170
  • 7
  • 31
  • 33
2
votes
1 answer

How to get hold of the cause of the PKIX path building failed Exception

I am getting the well known PKIX path building failed exception, and to find the underlying cause i have to enable java.security.debug=certpath and look at the logs. In my case the cause is certpath: SunCertPathBuilder.depthFirstSearchForward():…
Paralife
  • 6,116
  • 8
  • 38
  • 64
2
votes
1 answer

How to enable OCSP stapling on java TLS server?

This post is cross-posted, so make sure you check for updates in coderanch. I'm quite stuck implementing OCSP revocation checking on my client/server application, I managed to make client-side OCSP work, I implemented my own OCSP responder with…
Alex
  • 51
  • 7
2
votes
1 answer

What is the OCSP signing cert and key? Who should issue it?

What is the OCSP signing cert and key? Who should issue it? So, if I have this: Example Root Certificate Authority Example Intermediate Certificate Authority *.example.com (any domain) I have setup the OCSP for the domain cert only, so the OCSP…
Simpleperson
  • 121
  • 2
  • 8
2
votes
2 answers

openssl ocsp Responder Error: unauthorized (6)

I want to verify whether the Apple p12 certificate is revoked. Verify through OpenSSL, but the failure rate Responder Error: unauthorized (6) openssl s_client -connect ocsp.apple.com:443 2>&1 < /dev/null | sed -n '/-----BEGIN/,/-------END/p' >…
Rose Jane
  • 21
  • 1
  • 2
2
votes
2 answers

How to fix CSP script-src-elem Error although it is being defined?

I have something like this in a meta tag in my pug. I have a ton 2 3 CDN in my File. meta(http-equiv='Content-Security-Policy' content="default-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline';" ) I get an error something…
Sulav Dahal
  • 129
  • 3
  • 10
1 2
3
…
13 14