OCSP Requestor Test Suite Data Sheet
The Online Certificate Status Protocol (OCSP) is a protocol for determining the status of a digital certificate without requiring Certificate Revocation Lists (CRLs). The revocation check by an online protocol is timely and does not require fetching large lists of revoked certificates on the client side. This test suite can be used to test OCSP Requestor implementations.
Used specifications
| Specification | Title |
|---|---|
| RFC2560 | X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP |
| RFC5480 | Elliptic Curve Cryptography Subject Public Key Information |
| RFC3447 | Support for RSA cryptography in certificates |
| FIPS 186-4 | Support for DSA cryptography in certificates |
Tool-specific information
| Tested messages | Specifications |
|---|---|
| OCSP Response in HTTP Response | RFC2560 |
| Lightweight OCSP profile | RFC5019 |
| New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX) | RFC5912 |