ocsp support

[Ondrej Sevecek]

hello,

is anywhere a list of all applications supporting OCSP checking on various
platforms such as Vista/2008/7/R2 etc.? Is this a generic feature revocation
checking on the systems which is by default used for all revocation checking
or is that dependent on each application asking for this type of check?

thank you very much.

ondrej

 

[Robinson Zhang [MSFT]]

Hi Ondrej,

Thank you for your post.

Regarding the question 1, I am afraid to say we don't have an application
list for supporting OCSP checking on various platforms. Thank you for your
understanding.

Regarding the question 2, when an application calls CryptoAPI 2.0 to verify
a certificate that specifies locations to Online Responders, it search the
local CryptoAPI 2.0 in-memory and disk caches to find a cached OCSP
response. If no acceptable cached response can be found, a request will be
sent.

For more information:

Online Responder Installation, Configuration, and Troubleshooting Guide
(Section: Understanding the Online Responder's Components)
http://technet.microsoft.com/en-us/library/cc770413.aspx

Hope it helps.

Best regards,

Robinson Zhang
Microsoft Online Support

 

[Robinson Zhang [MSFT]]

Hi Ondrej,

I have not heard from you yet. We wanted to see if the information provided
was helpful. If you need further assistance, please do not hesitate to let
me know. I am looking forward to your reply.

Best regards,

Robinson Zhang
Microsoft Online Support

 

[Ondrej Sevecek]

yes, thank you for the info. it was quite definitive I didn't feel like
answer was necessary. so thank you.

as I understand it, Vista always tries to use OCSP (if possible) regardles
of application asking for the revocation status.

thank you very much.

ondrej.

 

[Robinson Zhang [MSFT]]

Hi Ondrej,

I am glad to hear the information was helpful. If you would like further
assistance, please do not hesitate to let me know.

Thanks, and have a great day!

Best regards,

Robinson Zhang
Microsoft Online Support