ocsp - Robuta Search

https://blog.cloudflare.com/ocsp-stapling-how-cloudflare-just-made-ssl-30/ OCSP Stapling: How CloudFlare Just Made SSL 30% Faster Mar 13, 2026 - Get the latest news on how products at Cloudflare are built, technologies used, and open positions to join the teams helping to build a better Internet. ocsp stapling just made cloudflare ssl faster https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls Intent to End OCSP Service - Let's Encrypt Today we are announcing our intent to end Online Certificate Status Protocol (OCSP) support in favor of Certificate Revocation Lists (CRLs) as soon as... intent end ocsp service let https://kjur.github.io/jsrsasign/api/symbols/KJUR.asn1.ocsp.BasicOCSPResponse.html jsrsasign JavaScript API Reference - KJUR.asn1.ocsp.BasicOCSPResponse javascript api reference ocsp https://mailman.nginx.org/pipermail/nginx-devel/2015-April/006739.html [PATCH] OCSP stapling: missing free calls. ocsp stapling patch missing free calls https://gist.github.com/vanbroup/52c4d742cea3deaed245f1669525f68b Making an OCSP request with OpenSSL using the issuer certificate and serial number and replay it... Making an OCSP request with OpenSSL using the issuer certificate and serial number and replay it with CURL for debugging - ocsp-request-serial.sh https://mailman.nginx.org/pipermail/nginx/2015-September/048751.html There is a newer OCSP response but was not provided by the server https://docs.cloud.google.com/certificate-authority-service/docs/ocsp-support Implement a delegated OCSP responder | Certificate Authority Service | Google Cloud Documentation certificate authority service google cloud implement delegated ocsp https://community.f5.com/discussions/technicalforum/redirect-based-on-ocsp-denied/83222 Redirect based on OCSP Denied | DevCentral I need some help with a situation for which an iRule is probably required: Configuration: - BigIP running 9.1.1. - Client... based on redirect ocsp denied devcentral https://mailman.nginx.org/pipermail/nginx/2015-September/048754.html There is a newer OCSP response but was not provided by the server https://datatracker.ietf.org/doc/html/rfc6960.html RFC 6960 - X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP (RFC 6960, ) public key infrastructure https://cryptography.io/en/latest/x509/ocsp/ OCSP — Cryptography 50.0.0-dev1 documentation ocsp cryptography documentation https://mta.openssl.org/pipermail/openssl-commits/2022-April/036406.html [openssl/openssl] 4d50a5: Fix wild pointer dereference in make_ocsp_response() openssl fix wild pointer make https://manpages.ubuntu.com/manpages/questing/man3/OCSP_REQUEST_new.3ssl.html Ubuntu Manpage: OCSP_REQUEST_new, OCSP_REQUEST_free, OCSP_request_add0_id, new free ubuntu manpage ocsp request https://datatracker.ietf.org/doc/html/rfc8954 RFC 8954 - Online Certificate Status Protocol (OCSP) Nonce Extension Online Certificate Status Protocol (OCSP) Nonce Extension (RFC 8954, ; obsoleted by RFC 9654) online certificate rfc status protocol ocsp https://community.f5.com/discussions/technicalforum/ocsp-with-crl-fallback/129614/replies/129618 OCSP With CRL Fallback | DevCentral Hi all, I've been trying to get my head around OCSP and CRL in a rush. My requirement is relatively simple but without APM (not an option) I'm trying to do... ocsp crl fallback devcentral https://pkg.go.dev/gitee.com/kingfane/mgate/pkg/tls/verifier/ocsp ocsp package - gitee.com/kingfane/mgate/pkg/tls/verifier/ocsp - Go Packages ocsp package gitee https://www.rfc-editor.org/rfc/rfc4557 RFC 4557: Online Certificate Status Protocol (OCSP) Support for Public Key Cryptography for Initial... https://bugzilla.mozilla.org/show_bug.cgi?id=950129 950129 - inconsistent OCSP fetching policy when verifying OCSP responses RESOLVED (brian) in NSS - Libraries. Last updated 2014-02-20. inconsistent ocsp fetching policy verifying https://community.f5.com/discussions/technicalforum/ocsp-responder-configuration-question/157747 OCSP responder configuration question | DevCentral Hi there, I am having some problem to use the default OCSP server URL which is contained in the AIA field of the certificate. In the OCSP... configuration question ocsp responder devcentral https://aws.amazon.com/video/watch/460d683fb6c/ AWS Private CA OCSP Demo - AWS Learn how to set up and use OCSP with AWS Private Certificate Authority private ca aws ocsp demo https://mailman.nginx.org/pipermail/nginx/2016-June/051156.html Differing ocsp responses differing ocsp responses https://www.rfc-editor.org/info/rfc6960/ RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP | RFC... This document specifies a protocol useful in determining the current status of a digital certificate without requiring Certificate Revocation Lists (CRLs).... public key infrastructure https://support.mozilla.org/es/questions/994264 The OCSP server has no status for the certificate | Foro de asistencia de Firefox | Ayuda de Mozilla https://support.mozilla.org/ar/questions/1572388 An error occurred during a connection to plm2020prod-gwc-lb.gecot.siemens-energy.net:8443. The OCSP... https://forums.opera.com/topic/5477/unable-to-verify-the-website-s-identity-ocsp-error/2?lang=en-US Unable to verify the website's identity (OCSP error) | Opera forums the website unable verify https://community.f5.com/discussions/technicalforum/is-it-possible-to-use-ldap-and-ocsp/42520 Is it possible to use LDAP and OCSP? | DevCentral Can a rule be created that references an LDAP username and password or OCSP client cert? Every attempt I've tried doesn't seem to work. OCSP Auth section... possible use ldap ocsp devcentral https://knowledge.broadcom.com/external/article/203382/set-up-tomcat-with-ocsp-certificates-wit.html Set up Tomcat with OCSP certificates with OM Web Viewer 12.1 set up web viewer tomcat ocsp https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-access-policy-manager-visual-policy-editor/access-policy-item-reference/about-authentication-items/about-ocsp-auth.html About OCSP Auth ocsp auth https://datatracker.ietf.org/doc/rfc9654/ RFC 9654 - Online Certificate Status Protocol (OCSP) Nonce Extension RFC 8954 imposed size constraints on the optional Nonce extension for the Online Certificate Status Protocol (OCSP). OCSP is used to check the status of a... online certificate rfc status protocol ocsp https://mailman.nginx.org/pipermail/nginx/2013-January/037029.html OCSP_basic_verify() failed ocsp basic verify failed https://kjur.github.io/jsrsasign/api/symbols/KJUR.asn1.ocsp.CertID.html jsrsasign JavaScript API Reference - KJUR.asn1.ocsp.CertID javascript api reference ocsp https://community.f5.com/discussions/technicalforum/ocsp-http-header-specificationexample-or-field-name-of-edipi/324994 OCSP HTTP Header Specification/Example or field name of EDIPI? | DevCentral Our application identifies users by the EDIPI passed in header. I'm coding this without having access at the moment so im relying heavily on documentation... http header ocsp specification example https://forums.opera.com/topic/5477/unable-to-verify-the-website-s-identity-ocsp-error/1?lang=en-US Unable to verify the website's identity (OCSP error) | Opera forums Oct 7, 2014 - Numerous websites will alternate between working and simply giving OCSP errors with any of the below info. Just wondering if anyone has any solutions for this.... the website unable verify https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/222150-configure-eap-tls-authentication-with-oc.html Configure EAP-TLS Authentication with OCSP in ISE - Cisco This document describes the steps required to set up EAP-TLS authentication with OCSP for real-time client certificate revocation checks. configure eap tls authentication ocsp https://bugzilla.mozilla.org/show_bug.cgi?id=230305 230305 - Error Trying to Validate Certificate Using OCSP - Directory Lookup Error RESOLVED (nobody) in Core Graveyard - Security: UI. Last updated 2016-09-27. validate certificate error trying using ocsp https://support.mozilla.org/gl/questions/1162175 Invalid OCSP signing certificate in OCSP response. Error code: SEC_ERROR_OCSP_INVALID_SIGNING_CERT... certificate in error code invalid ocsp signing https://mailman.nginx.org/pipermail/nginx-devel/2013-July/003959.html [nginx] OCSP stapling: fix error logging of successful OCSP resp... ocsp stapling fix error nginx logging successful https://support.mozilla.org/sq/questions/1013248 Can't get to Fanfiction.net. Receiving Error code: sec_error_ocsp_invalid_signing_cert | Forum... https://community.f5.com/discussions/technicalforum/why-we-crl-ocsp/219649 Why we CRL? OCSP? | DevCentral I am wondering, Why we check client certificate using CRL? or OCSP? Since i am holding the Public Certicate and private ket in my f5 box? Client are just... why we crl ocsp devcentral https://mailman.nginx.org/pipermail/nginx/2015-September/048743.html There is a newer OCSP response but was not provided by the server https://mailarchive.ietf.org/arch/msg/pkix/TJ2XyuAWR-fpKFqTLlD-JhvBy2U/ Re: [pkix] a question of cert (and OCSP) extension syntax Search IETF mail list archives a question pkix cert ocsp extension https://community.f5.com/kb/technicalarticles/building-an-openssl-certificate-authority---configuring-crl-and-ocsp/279492 Building an OpenSSL Certificate Authority - Configuring CRL and OCSP | DevCentral Jun 5, 2023 - Certificate Revocation Lists We completed reviewing our PKI design considerations and created root and intermediary certificates completeing our... certificate authority building openssl configuring crl https://community.f5.com/discussions/technicalforum/ocsp-stapling/202780/replies/202783 OCSP Stapling | DevCentral Has anyone successfully got OCSP stapling working in 11.6? If so, can you share your configuration? ocsp stapling devcentral https://groups.google.com/a/chromium.org/g/ct-policy/c/WX6iZt7uJBs Understanding use-cases for SCTs delivered via OCSP stapling for TLS extension use cases ocsp stapling understanding https://lists.gnupg.org/pipermail/gnutls-help/2021-October/004728.html [gnutls-help] OCSP protocol using GnuTLS gnutls help ocsp protocol using https://knowledge.broadcom.com/external/article/163194/pgp-encryption-server-may-encrypt-messag.html PGP Encryption Server may encrypt messages to revoked S/MIME certificates if the CRL or OCSP is... https://mta.openssl.org/pipermail/openssl-commits/2022-April/036407.html [openssl/openssl] caf7a9: Fix wild pointer dereference in make_ocsp_response() openssl fix wild pointer make https://datatracker.ietf.org/doc/review-ietf-lamps-ocsp-nonce-update-07-secdir-telechat-salowey-2024-05-13/email/ Email expansions for review-ietf-lamps-ocsp-nonce-update-07-secdir-telechat-salowey-2024-05-13-00 https://support.mozilla.org/ta-LK/questions/1162020 Error code: SEC_ERROR_OCSP_INVALID_SIGNING_CERT Whats going on i cannot access Outlook Hotmail &... https://lists.gnupg.org/pipermail/gnutls-help/2017-December/004400.html [gnutls-help] Problem with OCSP status in gnutls-cli gnutls help problem ocsp status https://forums.opera.com/topic/2446/ocsp-hard-fail OCSP hard-fail | Opera forums May 6, 2014 - Opera should add an option, to opt-in into OCSP hard-fail. Firefox and Explorer allow this configuration and I think that it makes sense in the wake of... ocsp hard fail opera forums https://knowledge.broadcom.com/external/article/172240/user-gets-access-denied-page-due-to-onli.html User gets access denied page due to Online Certificate Status Protocol (OCSP) Internal Error https://community.f5.com/discussions/technicalforum/ocsp-stapling-globalsign-configuration/154097 OCSP Stapling Globalsign configuration | DevCentral Hi, Before activating Ocsp stapling on the F5, i see two request to ocsp2.globalsin.com when i try a connection to my site: - the first :for root r3 - the... ocsp stapling globalsign configuration devcentral https://www.ocspcatrescue.org/ OCSP Cat Rescue | Orange County, CA OCSP Cat Rescue is a non-profit, no-kill cat rescue, focusing on saving cats and kittens from high-kill shelters. cat rescue orange county ocsp https://community.f5.com/discussions/technicalforum/ssl-ocsp-irule-help-needed/42727 ssl ocsp Irule help needed | DevCentral I have a virtual server that serves pages to clients with and without client certificates. Those users with a client certificate will need to be verified... help needed ssl ocsp devcentral https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/using_ocsp 26.7. Configuring OCSP Responders | Linux Domain Identity, Authentication, and Policy Guide | Red... 26.7. Configuring OCSP Responders | Linux Domain Identity, Authentication, and Policy Guide | Red Hat Enterprise Linux | 7 | Red Hat Documentation https://manpages.ubuntu.com/manpages/questing/man1/openssl-ocsp.1ssl.html Ubuntu Manpage: openssl-ocsp - Online Certificate Status Protocol command Online Certificate Status Protocol command online certificate ubuntu manpage openssl ocsp https://www.oit.va.gov/Services/TRM/StandardPage.aspx?tid=5268&tab=2&minYear=2023 X.509 Public Key Infrastructure (PKI) Online Certificate Status Protocol (OCSP) VA Technical Reference Model Home Page public key infrastructure online certificate x https://bugzilla.mozilla.org/show_bug.cgi?id=489557 489557 - OCSP Response signature cert validation regression RESOLVED (nelson) in NSS - Libraries. Last updated 2009-05-01. ocsp response signature cert validation https://mailarchive.ietf.org/arch/msg/tls/omFrRe_rEHa9uZ1cI9Lp8Te_gUU/ Re: [TLS] OCSP Must Staple Search IETF mail list archives tls ocsp must staple https://kjur.github.io/jsrsasign/api/symbols/KJUR.asn1.ocsp.TBSRequest.html jsrsasign JavaScript API Reference - KJUR.asn1.ocsp.TBSRequest javascript api reference ocsp https://mailman.nginx.org/pipermail/nginx-devel/2016-September/008772.html [nginx] OCSP stapling: fixed using wrong responder with multiple certs. ocsp stapling nginx fixed using wrong https://community.f5.com/discussions/technicalforum/ocsp-responder/213751/replies/213752 OCSP Responder | DevCentral Hi guys, I just wanted to know if anyone of you here had already setup an ocsp responder? We have this setup but not really sure if I am doing it... ocsp responder devcentral https://community.f5.com/discussions/technicalforum/ocsp-stapling/202780/replies/202782 OCSP Stapling | DevCentral Has anyone successfully got OCSP stapling working in 11.6? If so, can you share your configuration? ocsp stapling devcentral https://developer.hashicorp.com/vault/tutorials/pki/pki-unified-crl-ocsp-cross-cluster PKI Unified CRL and OCSP with cross cluster revocation | Vault | HashiCorp Developer Use Vault's PKI secrets engine unified CRL and OCSP feature with Performance Replication cross cluster certificate revocation. https://curl.se/docs/CVE-2026-7009.html curl - OCSP stapling bypass with Apple SecTrust - CVE-2026-7009 ocsp stapling curl bypass apple cve https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/certificate-management/certificate-revocation/online-certificate-status-protocol-ocsp Online Certificate Status Protocol (OCSP) online certificate status protocol ocsp https://community.f5.com/discussions/technicalforum/load-balancing-ocsp-responder-pool/118817 Load Balancing OCSP Responder Pool | DevCentral I am trying to determine a valid http get command to implement as a health monitor for load balancing 2 Windows 2012 OCSP Responders. I am using fiddler to... load balancing ocsp responder pool devcentral https://datatracker.ietf.org/doc/review-ietf-lamps-ocsp-nonce-update-07-secdir-telechat-salowey-2024-05-13/history/ History for review-ietf-lamps-ocsp-nonce-update-07-secdir-telechat-salowey-2024-05-13 -00 https://datatracker.ietf.org/doc/html/rfc6960/ RFC 6960 - X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP (RFC 6960, ) public key infrastructure https://community.f5.com/discussions/technicalforum/enabling-ocsp-stapling-via-f5-sdk-fails/210165 Enabling OCSP stapling via f5-sdk fails | DevCentral I want to enable OCSP stapling for a lot of clientSSL profiles, so I thought if'd use the f5-sdk python library. However, my tests so far fail miserably,... ocsp stapling enabling via sdk fails https://mailman.nginx.org/pipermail/nginx/2014-March/042579.html OCSP, ssl_trusted_certificate, and ssl_stapling_verify ocsp ssl trusted certificate stapling https://access.redhat.com/webassets/avalon/d/red_hat_jboss_enterprise_application_platform/8.1/javadocs/org/bouncycastle/cert/ocsp/package-tree.html org.bouncycastle.cert.ocsp Class Hierarchy (Red Hat JBoss Enterprise Application Platform 8.1.1.GA... tree: package: org.bouncycastle.cert.ocsp https://community.f5.com/kb/technicalarticles/configuring-ocsp-stapling-on-big-ip/290459?topicRepliesSort=postTimeDesc&autoScroll=true Configuring OCSP Stapling on BIG-IP | DevCentral Jan 26, 2016 - When setting up an SSL connection the cert tells you its expiration, but how do you tell if the SSL Cert has been revoked? There are multiple ways to do... ocsp stapling big ip configuring devcentral https://groups.google.com/a/chromium.org/g/ct-policy/c/6ewCgspeyZE Change to Chrome's CT policy: removing support for OCSP-delivered SCTs change to https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-access-policy-manager-authentication-methods/ocsp-authentication.html OCSP Authentication ocsp authentication https://mailarchive.ietf.org/arch/msg/tls/K7L9fyGDb1gnaFxdManAxNt7-ws/ Re: [TLS] OCSP Must Staple Search IETF mail list archives tls ocsp must staple https://ml-archives.squid-cache.org/squid-users/2015-December/008130.html [squid-users] How to enable OCSP stapling for squid 3.5 how to enable ocsp stapling squid users https://community.f5.com/kb/technicalarticles/ocsp-through-an-outbound-explicit-proxy/286145/comments/286147 OCSP through an outbound explicit proxy | DevCentral Dec 5, 2017 - Hey DC community, Kevin Stewart here with a fun little project I'd like to share. There have been countless questions about this over the years: how to pass... ocsp outbound explicit proxy devcentral https://kjur.github.io/jsrsasign/api/symbols/KJUR.asn1.ocsp.ResponseData.html jsrsasign JavaScript API Reference - KJUR.asn1.ocsp.ResponseData javascript api reference ocsp https://community.f5.com/discussions/technicalforum/ocsp-and-bigip-irules-for-external-client-certificate-requests/167115 OCSP and BigIp Irules for External Client Certificate Requests | DevCentral I went through and found an article that talks to part of my questions, but I'm still not 100% on how to accomplish this with our current F5 setup. Im trying... client certificate ocsp bigip irules external