Connect OCSP service to CertDB in order to send responses
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
I'm trying to use the `CA` and `OCSP` utilities from `CFSSL`, however I don't find any documentation related to setting a `OCSP` server to connect directly to a `certDB`.
What I did found was that the **`serve`** command offers the flags to initialize a _OCSP signer_, and from there _OCSP sign_ any issued certificates and then update the responses file required by the **`ocspserve`** command internally.
**Is there a better way to do this?** Since the method above requires to update the _OCSP service_ each time a new certificate is issued.
Contributor guide
Assessment
This issue has not been assessed yet.