[Pki-users] Setting nextUpdate periodicity on OCSP responses different than CRL

Nimeh, Jamil Jamil.Nimeh at viasat.com
Fri Jul 13 16:26:50 UTC 2012


Hello all,

I have a CA that generates CRLs with a 2-day period between this and nextUpdate.  In my OCSP responder (separate from the CA), I also have the nextUpdate field set in the responses and they appear to have the same periodicity as the CRL.  I wanted to know if there's a way in the OCSP responder to shorten the length of time between thisUpdate and nextUpdate just for OCSP responses without modifying the CRL's validity period.  Can this be done with Dogtag 9.0?

Thanks,
Jamil




More information about the Pki-users mailing list