Hi Lectrismo, take a look at "bin/env” file in your ActiveMQ distribution. There you can set system properties.
Please let us know how it works. I started working on an example for this, but never finished it. I hope to get back to that soon. Regards -- Dejan Bosanac about.me/dejanb On Thu, Dec 17, 2015 at 7:36 AM, Lectrismo <[email protected]> wrote: > Hey Guys, > > I'm new to ActiveMQ and started to configure an instance hosted on Windows > Server 2012R2. > It recently works fine with client certificate-based authentication which I > set up in the past days. > Now I wanted to configure CRL checking via OCSP because a static crl List > is > only loaded on service start. > Thats a little bit too static for me. That's why we set up an OCSP > responder > and wanted to configure it in ActiveMQ. > I found the following snippet on the offical Apache ActiveMQ Website (How > do > I use SSL): > > This list is static and loaded on broker startup. > *You can also enable more advanced Online Certificate Status Protocol > (OCSP) > protocol by setting appropriate system properties * > (in ${ACTIVEMQ_HOME}/bin/env) like > > ACTIVEMQ_SSL_OPTS="-Dcom.sun.security.enableCRLDP=true -Docsp.enable=true > -Docsp.responderURL=http://ocsp.example.net:80"; > > Could anyone tell me please where to paste it and what to do next (service > restart, server reboot, etc..)? > > > many thanks in advance, > Lectrismo > > > > -- > View this message in context: > http://activemq.2283324.n4.nabble.com/Configure-OCSP-CRL-Checking-tp4705089.html > Sent from the ActiveMQ - User mailing list archive at Nabble.com. >
