Questions tagged [ocsp]

Online Certificate Status Protocol (OCSP) is a protocol used for validation (ie revocation status) of X509 certificates in a PKI system as a real-time alternative to CRLs.

Filter by
Sorted by
Tagged with
1 vote
0 answers
184 views

Android Certificate Revocation Checking

I am hoping I can leverage everyone's knowledge on this one as I am at a lose. I have an Android 10 Device connecting to a containerized web application that is secured by a custom Certificate ...
Elliot's user avatar
  • 11
0 votes
1 answer
144 views

Why is OCSP must-staple secure?

Trying to understand OCSP stapling and OCSP must-staple, I've read multiple explanations, but I still don't understand what makes OCSP must-staple secure. My understanding is that, during TLS, the ...
not2savvy's user avatar
  • 754
0 votes
1 answer
100 views

Advantage of using OCSP stapling compared to frequently renewed TLS certificates without OCSP

What's the advantage of using OCSP stapling with some OCSP response validity period compared to a TLS certificate with the same short validity period which would have to be renewed at the same ...
Juergen's user avatar
  • 103
2 votes
1 answer
202 views

Do VPNs log and analyze OCSP requests?

I am a privacy-conscious user currently living in Russia where the Internet is censored and monitored by the Russian state. Russian ISPs are legally required to log and store all users’ Internet ...
Gilgamesh's user avatar
1 vote
1 answer
193 views

How does the client get the certificate (and public key) of the delegated authority (OCSP responder) to confirm the response in OCSP?

I have one question regarding the OCSP protocol to check if the certificate is revoked or not. The question is about checking whether the intermediate CA certificate immediately below the root CA is ...
dassd's user avatar
  • 113
1 vote
0 answers
207 views

Any vulnerability of OCSP for proof of concept

I have an assignment in which I have to implement OCSP and do a proof of concept of a vulnerability. My idea was to implement OCSP without using a nonce (this is done) and then perform a replay attack....
Pedro's user avatar
  • 11
1 vote
0 answers
154 views

Implement Replay attacks in python [closed]

For an assignment I have to implement a proof of concept and (optionally attack it). The part of OCSP is working so far. I have a client that sends the request to a server, the server verifies if the ...
Z123's user avatar
  • 11
2 votes
0 answers
235 views

OCSP Must-Staple test website?

I'm interested in the status of OCSP respect in modern browsers (particularly the one I'm using right now). Is there any website that will allow me to test how my browser treats the status_request ...
JamesTheAwesomeDude's user avatar
0 votes
1 answer
166 views

Exposing ADCS OCSP on the Public Internet

I am building a Certificate Authority using Windows Server ADCS as a 'Standalone' CA but my application would be greatly improved if I can utilise OCSP. Is the ADCS Online Responder Role Service ...
Vjz's user avatar
  • 11
0 votes
0 answers
420 views

Why my certificate does not have OCSP must-staple extension even when CSR contains it, is OCSP must-staple still used?

We received recently security report with [low] security issue: Missing "Must-Staple" extension on certificate. With help of old article oscp-must-staple I managed to create CRA with ...
romanmoravcik's user avatar
1 vote
1 answer
427 views

Is a OCSP request verified via TLS?

I was wondering if the connection towards the ocsp responder/server is TLS encrytped itself. Meaning that the client requesting a validity check for a certificate verifies the OCSPs server certificate?...
metriXc's user avatar
  • 65
0 votes
2 answers
555 views

Is Mac OS Big Sur Spying?

I would like to know if macOS "Big Sur" sends unencrypted OCSP requests. I am a newbie and not aware of technical stuff, but when I came across Jeffrey Paul's article, I am a bit concerned ...
Axonritts's user avatar
1 vote
1 answer
1k views

Possible to create a self-signed certificate with AIA extension using PowerShell or openssl?

I am able to use the PowerShell New-SelfSignedCertificate cmdlet to create a self-signed cert just fine, but I'd like to create one with an AIA extension and give it an OCSP responder URL. There is a ...
ericOnline's user avatar
17 votes
4 answers
5k views

Are SSL certs auto-revoked if their Not-Valid-After date is reached without renewing?

I'm learning about X509 certs used in client-cert authentication to https endpoints. If I have an OCSP checker (Python script that creates, submits, decodes OCSP responses), do I need to check the not-...
ericOnline's user avatar
0 votes
1 answer
633 views

Should root certificates have OCSP or CRL for it? [duplicate]

Should root certificates have OCSP or CRL for its own revocation status? So here is what I mean: Intermediate Cert -> http://example.com/root.crl SAN Cert -> https://example.com/intermediate.crl ...
Example person's user avatar
0 votes
1 answer
266 views

How revocation status of delegated OCSP responder is verified at the client side?

If the OCSP signing is delegated explicitly to another entity and that delegated OCSP responder is compromised, how to revoke the certificate and convey the revocation information to a client? We need ...
Kumar's user avatar
  • 191
2 votes
0 answers
1k views

OpenSSL OCSP Responder "Cert Status: good" -> "Cert Status: unknown"

Summary: Certificates calling to OCSP Responder (OCSPr) have their "Cert Status" change from "good" to "unknown" with no known to changes to environment. Completely lost ...
jj_inno's user avatar
  • 33
2 votes
0 answers
182 views

OCSP responder that returns embedded SCTs

There are three ways for a TLS client to obtain Signed Certficiate Timestamps (SCTs): During the TLS handshake itself using the SCT List extension As embedded precertificate SCTs in the leaf ...
jnsp's user avatar
  • 405
1 vote
1 answer
3k views

Correct CRL and OSCP URIs along certificate chain

Merely because of private interest and usage in my own network, I'm creating a certificate chain (Root CA → Intermediate CA → Server cert) using openssl. I'd like the certificate chain to be ...
ahuemmer's user avatar
  • 143
0 votes
1 answer
1k views

Check the certification chain with ocsp

I have an architecture with a root ca and a sub ca like this: root ca > sub ca > server <----------> external client The root ca delivers a certificate for the sub ca. The sub ca delivers a ...
Beretta's user avatar
  • 35
0 votes
0 answers
970 views

Certificate checking with OCSP and root CA not trusted

I have a root certificate authority, an sub CA and an server. The root ca delivers a certificate for the sub CA. The sub CA delivers a certificate for the server. I want to check all the ...
Beretta's user avatar
  • 35
4 votes
1 answer
838 views

OCSP invalidation of intermediate CA using OCSP_SIGNING

I'm implementing an OCSP server to answer OCSP requests for my custom CA. I already implemented the invalidation of leaves certificates, with the intermediate CA certificate signing the OCSP response, ...
zarak's user avatar
  • 41
2 votes
1 answer
1k views

How does an offline Root CA sign OCSP Response?

As Root CA are kept offline for security purposes, how does it sign OCSP Response sent by Client for Intermediate Certificate Status Check?
HyperX Pro's user avatar
1 vote
1 answer
886 views

OCSP multi stapling : how to enable it? Simple stapling is OK

I would like to set up OCSP multi stapling and I can not find a lot of documentation on it, or in any case, recent information. I have a root certificate authority (CA) and a daughter CA below. Both ...
Beretta's user avatar
  • 35
1 vote
0 answers
142 views

Mix OCSP stapling + CRL in a hierarchy of CAs

In an architecture with a root CA and a daughter CA, is it possible to combine OCSP stapling and CRL check? More precisely, is it possible for a client: to connect to an https server verify the ...
Beretta's user avatar
  • 35
11 votes
1 answer
3k views

How well do current browsers handle certificate revocation?

I am a Firefox user and recently stumbled upon the Liu, Yabing, et al. "An end-to-end measurement of certificate revocation in the web's PKI." Proceedings of the 2015 Internet Measurement Conference. ...
Cobalt Scales's user avatar
2 votes
1 answer
379 views

Extremely high bandwidth usage for OCSP? [closed]

ISPs where I live charge based on usage. A friend just moved here and blew through 60 GB of data ($115) in a couple weeks. When asked, the ISP provided a .csv of URLs and bandwidth usage over those 2 ...
dividius's user avatar
  • 221
5 votes
2 answers
1k views

Is OCSP Request Signing Necessary?

We can directly request OCSP Server for certificate status. Then why is there an option to sign the request? Is it to identify incoming requests or something?
HyperX Pro's user avatar
2 votes
1 answer
616 views

OCSP responseStatus, is it really useful?

Based on RFC-6960 an OCSP Response should have the following as a minimum: OCSPResponse ::= SEQUENCE { responseStatus OCSPResponseStatus, responseBytes [0] EXPLICIT ResponseBytes ...
harshc's user avatar
  • 141
2 votes
1 answer
1k views

PKI - CRL and OCSP

I've done quite a bit of reading about PKI in ADCS and CRL/OCSP, but I can't seem to find an answer to a small couple of questions I still have: It is clear to me that even with OCSP in place, you ...
JonU's user avatar
  • 25
1 vote
1 answer
322 views

How can a client validate a OCSP Responders Delegate Certificate and how does it obtain it?

In RFC 6960 4.2.2.3. Basic Response the response components are defined. This list does not contain the OCSP Responders certificate. If the responder is a delegate, the requester does not have a copy ...
Simon's user avatar
  • 121
1 vote
1 answer
770 views

OCSP, CRLs, crlset - Revocation Delivery and Attacks

OCSP responses have a 'nextUpdate' field, which is the expected time for the new revocation update and that the current revocation can be considered valid. The revocations can be cached by the ...
Nick's user avatar
  • 277
11 votes
1 answer
1k views

Do long lived TLS connections pose a security risk?

I would like to better understand the implications of maintaining a long lived (hours, days) TLS connection with respect to certificate revocation. As I understand TLS, the client verifies the server'...
jdgilday's user avatar
  • 211
2 votes
1 answer
419 views

Does the ECDSA signature value (of an OCSP response) need to be DER encoded

In OCSP responses by a certain eIDAS PKI I every once in a while get signature values which, when unpacked from their BIT STRING, contain an ECDSA signature whose INTEGER constituents have an ...
mkl's user avatar
  • 1,103
1 vote
0 answers
110 views

RFC6960 requested ocsp service definition

In RFC6960 (https://www.rfc-editor.org/rfc/rfc6960) is written the request data contains the requested service and the OCSP responder checks, if the requested service is provided. But when I had a ...
micha's user avatar
  • 11
4 votes
1 answer
7k views

How can I figure out which OCSP URL should be used for a certificate with OpenSSL?

I have a PEM file that encodes a site's leaf certificate. I'd like to check it hasn't been revoked by querying the relevant OCSP server but I don't know which URL to use. How can I extract the OCSP ...
Adam Williams's user avatar
4 votes
2 answers
869 views

Should webservers staple unsuccessful OCSP responses?

My primitive understanding of OCSP is that: Assertions are signed by the CA and valid for a short period. Stapling refers to the practice of pushing the OCSP request work onto the webserver, and then ...
Adam Williams's user avatar
0 votes
1 answer
297 views

What's the common strategy for issuing OCSP requests

I am currently defining a PKI for code signing certificates on an embedded device (without internet connection). I define the behavior of the certificate issuer(FW release authority) as well as the FW ...
Dima Shifrin's user avatar
0 votes
1 answer
634 views

OCSP doubts about CA and OCSP Responder

My question is about this image. Suppose that client is Alice and Server is Bob. So, basically, I'm trying to setup a scenario... I have a remote Server (Bob) that has an https website. I make: ...
PRVS's user avatar
  • 105
0 votes
1 answer
434 views

OCSP stapling Alice and Bob

In the case of OCSP stapling in the browsers, it works this way. But my question is, in a case where I have a communication between Alice and Bob how this works? I know that if I use OCSP normal, both ...
PRVS's user avatar
  • 105
1 vote
0 answers
535 views

Cisco ASA, OCSP

I have successfully configured OpenSSL OCSP responder with this hierarchy: RootCA > OCSP responder (signed by RootCA). I have deployed a trustpoint (named RootCA) into the ASA with the RootCA public ...
sharlino's user avatar
4 votes
2 answers
7k views

Can't request ocsp status with chain of certificates

I have deployed basic ocsp server from OpenSSl Cookbook by Ivan Ristic page 44 with following command $ openssl ocsp -port 9080 -index db/index -rsigner root-ocsp.crt -rkey private/root-ocsp.key -CA ...
srghma's user avatar
  • 203
2 votes
1 answer
1k views

Is the use of regular OCSP or OCSP stapling a privacy risk?

Is the use of regular OCSP or OCSP stapling a privacy risk? Since a request is sent (in each handshake) to an (external) OCSP Responder. The OCSP responder can potentially register a load of ...
Bob Ortiz's user avatar
  • 6,665
8 votes
2 answers
4k views

What is the exact difference between regular OCSP and OCSP stapling?

What is the exact difference between the Online Certificate Status Protocol (OCSP) and OCSP stapling, which seems to be "...an alternative approach to the Online Certificate Status Protocol (OCSP)"?
Bob Ortiz's user avatar
  • 6,665
3 votes
1 answer
2k views

Can an OCSP response be issued by a subca of the Root CA that has issued the certificate?

Is this Public Key Infraestructure possible according with the RFC 6960 Online Certificate Status Protocol - OCSP, Authorized Responders? OCSP response for Cert is signed with a certificate issued by ...
pedrofb's user avatar
  • 270
1 vote
0 answers
217 views

Combining OCSP Stapling and manual OCSP request from client [closed]

Currently, I have an implementation where I send an OCSP request in the verify_callback(int preverify_ok, X509_STORE_CTX *x509_ctx) function for every intermediate and end-entity certificate. The ...
shanzter's user avatar
3 votes
1 answer
617 views

OCSP Responder certificate - CRL distribution points and AIA OCSP URI

I am building OCSP responder and I need to issue OCSP Signer certificate from CA that will be used to sign OCSP responses. In a definition of certificate profile for OCSP Signer certificate, should I ...
user1563721's user avatar
  • 1,119
0 votes
1 answer
157 views

OCSP from branch office to central office

Our firm wants to validate certificates using OCSP in its branch offices. However, when the OCSP responder as defined in the certificate is down, they want to fallback on CRLs, which is the right ...
Ti.'s user avatar
  • 1
3 votes
1 answer
151 views

Is there an imbalance of issuer and responders in OCSP verification?

I'm trying out OCSP verification, and I'm not sure I'm following all that's going on. The requester can send 1-N certificate IDs, each has issuer hashes/serial no. The responder generates the counter-...
Pawel Veselov's user avatar
1 vote
1 answer
599 views

Revocation of intermediate trusted CA

My question is related to the revocation of intermediate CA. Suppose I have a device that performs the revocation checks on the whole chain and assigns the intermediate CA's a trusted level.Now ...
H4X's user avatar
  • 161