On Tue, 18 Mar 2003, [EMAIL PROTECTED] asked:
how does the CRL get from the CA to the OCSP responder
There is no single answer. Possibilities include:
-A "publication" plugin for the CA that sends it to the OCSP responder
-The CA publishes to LDAP and the OCSP responder polls for new CRLs
-Revocation information is in the OCSP responder, it gives the CA
a new CRL to sign periodically.
-CA and OCSP are a single integrated program.
> What is the good answer.
I have always been fond of #3.
/r$
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
