OCSP Responder Test Suite Data Sheet
The Online Certificate Status Protocol (OCSP) is a protocol for determining the status of a digital certificate without requiring Certificate Revocation Lists (CRLs. The revocation check is by an online protocol is timely and does not require fetching large lists of revoked certificate on the client side. This test suite can be used to test OCSP Responder implementations.
Used specifications
| Specification | Title |
|---|---|
| RFC2560 | X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP |
| RFC5480 | Elliptic Curve Cryptography Subject Public Key Information |
| RFC3447 | Support for RSA cryptography in certificates |
| FIPS 186-4 | Support for DSA cryptography in certificates |
| RFC5019 | X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP |
Tool-specific information
| Tested messages | Notes | Specifications |
|---|---|---|
| OCSP Request in HTTP POST | RFC2560 | |
| OCSP Request in HTTP GET | Small requests (after decoding, less than 255 bytes) | RFC2560 |
| Lightweight OCSP protile | RFC5019 | |
| New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX) | RFC5912 |