Subject: Certificate Revocation Checking via OCSP
Author: X509
Posted on: 06/25/2010 10:00:03 PM
What is OCSP?
OCSP stands for Online Certificate Status Protocol which is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate. It is described in RFC 2560 and is on the Internet standards track. It was created as an alternative to certificate revocation lists (CRL), specifically addressing certain problems associated with using CRLs in a public key infrastructure (PKI). Messages communicated via OCSP are encoded in ASN.1 and are usually communicated over HTTP. The "request/response" nature of these messages leads to OCSP servers being termed OCSP responders.
Replies:
References:
