cloudflare / cloudflare/cfssl

OCSP and CRL implementation?

Open
#968 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

Hi,

I have tried to understand the data flow and how to actually implement OCSP and CRL with cfssl.

there are at least 4 commands related to OCSP
ocsprefresh
ocspsign
ocspdump
ocspserve

ocspserve is easy, that will run in the end, after valid ocsp data has been generated.

What is the flow for the other components? This is what I think should happen
ocsprefresh and pcspsign runs every X minute in some kind cron or some other trigger
ocspdump are used to export data to be used with ocspserve

Are there any design documents available? High level flows or anything?

One other question related to this is related to gencrl, it requires a input file with one serial numer per line.

Is gencrl totally unrelated to the revoke database entries that ocsp and revoke are using?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.