Hi Steve,

> -----Original Message-----
> From: Dr. Stephen Henson
>
> There are two automatic trust models for OCSP responder
> certificates. One is the CA key that signed the
> certificate also signs responses: that isn't
> recommended for security reasons.

can you please elaborate on this?

Thank you,
Patrick Eisenacher
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to