Implementing an OCSP responder: Part I - Introducing OCSP

re: Implementing an OCSP responder: Part I - Introducing OCSP

Mkline — Thu, 25 Jun 2009 00:50:26 GMT

Good entry Chris!

This is going to be a very good series. Especially for those of us in the federal space as smart cards are mandatory with the CAC rollout in DoD and HSPD-12 for other agencies.

It would be nice to move from CRLs to OCSP. (I'm not saying CRLs will be eliminated anytime soon)

It would be brutal interviewing with you...that would be a hard core PKI interview :)

Thanks

Mike

re: Implementing an OCSP responder: Part I - Introducing OCSP

robbonfiglio — Mon, 06 Jul 2009 16:41:23 GMT

We are currently using Tumbleweed for CAC authentication, and were told from someone w/in Microsoft that we could take advantage of the OCSP Online Responder. Any tips, or documentation on how to set this up? We are not using our own CA here. All certificates come from the DOD CA's.

re: Implementing an OCSP responder: Part I - Introducing OCSP

NedPyle — Mon, 13 Jul 2009 18:47:34 GMT

Hi robbonfiglio,

We're not permitted to discuss US DOD PKI implementations here in the blog. Please open a regular USNAT support case with us (through your TAM, if you prefer) so we can discuss this offline.

Thanks,

Ned