From Jamil.Nimeh at viasat.com Fri Jul 13 16:26:50 2012 From: Jamil.Nimeh at viasat.com (Nimeh, Jamil) Date: Fri, 13 Jul 2012 16:26:50 +0000 Subject: [Pki-users] Setting nextUpdate periodicity on OCSP responses different than CRL Message-ID: <6A95FA630FB5124C886BAD159CDBA1F011A31840@wdc1exchmbxp05.hq.corp.viasat.com> Hello all, I have a CA that generates CRLs with a 2-day period between this and nextUpdate. In my OCSP responder (separate from the CA), I also have the nextUpdate field set in the responses and they appear to have the same periodicity as the CRL. I wanted to know if there's a way in the OCSP responder to shorten the length of time between thisUpdate and nextUpdate just for OCSP responses without modifying the CRL's validity period. Can this be done with Dogtag 9.0? Thanks, Jamil