OCSP Responder Provider

The Online Certificate Status Protocol (OCSP) is an Internet protocol used to obtain the revocation status of an X.509 digital certificate. It is formalized in RFC 2560.

OCSP was created as an alternative to Certificate Revocation Lists (CRLs), specifically addressing certain problems associated with using CRLs in a Public Key Infrastructure (PKI).The request and response nature of these messages lead to OCSP servers being termed OCSP responders. iSM can communicate with an OCSP responder to obtain the revocation status of a certificate, avoiding the need to manage certificates locally in many cases.

The following table lists the OCSP Responder Provider properties.

Property

Description

Name *

The name of the OCSP Responder definition to add.

Description

A brief description of the use of this OCSP Responder.

Responder URL *

Location of the OCSP responder. For example:

http://ocsp.example.net:80

Certificate Subject Name

Subject name of the certificate for the OCSP responder. For example, CN=OCSP Responder and O=XYZ Corp.

Certificate Issuer Name

Issuer name of the certificate for the OCSP responder. For example, CN=Enterprise CA and O=XYZ Corp. This property is required if a value for the Certificate Subject Name parameter is not specified.

Certificate Serial Number

Serial number of the OCSP responder's certificate. For example, 1234567890123456789. This property is required if a value for the Certificate Subject Name parameter is not specified.

Certificate Store *

Certificate store where the responder certificate can be retrieved.

HTTP Client Provider *

HTTP client provider that manages outgoing connections to the responder.


iWay Software