asked on

OCSP website to check the certificate status

Hi Guys,

I have configured Issuing CA 1 and Webserver 1
Issuing CA - (CA role, CA Webenrollment role, IIS)
Webserver - (Online responder)

Here my question is When i checked the IIS of webserver it show the website for OCSP running but when i click nothing opens (500 error)

Client request me to setup a website for OCSP to access externally, so any one please advise how can I proceed further.

OCSP website output should be - check the status of certificate with options yes, No, Unknown.

Can anyone guide me..?

David Favor

You can't access an OCSP server from a Web browser + expect anything useful to come back.

https://community.letsencrypt.org/t/ocsp-requests-via-openssl-not-working/37798 provides information about how to accomplish this related to LetsEncrypt.

You must use the openssl command line program + your domain's cert files + point to the related OCSP server.

Refer to your IIS version of docs for how to do this.

With Apache, this requires a handful of lines added to Apache's global config file. Likely the same for IIS.

Note: It's highly unlikely you'll ever have a reason to run the above openssl command, as OCSP tends to work, if you follow your Web server's OCSP setup instructions.

This question needs an answer!

Become an EE member today

7 DAY FREE TRIAL

Members can start a 7-Day Free trial then enjoy unlimited access to the platform.

View membership options

Learn why we charge membership fees

We get it - no one likes a content blocker. Take one extra minute and find out why we block content.