-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Sushil,

On 8/29/13 2:38 AM, Sushil Prusty wrote:
> I need to configure OCSP in tomcat for my project and need to test
> through client browser . I searched every where in all search
> engine but unable to find out .
> 
> Please help out on How can we configure OCSP in tomcat.

The Tomcat native library must be built with OCSP support built-in or
not (it's not runtime selectable). If you want to build with OCSP
support, you'll want to use the "--enable-ocsp" switch when running
"configure" before compiling.

Are you using a package managed by RedHat, or did you build tcnative
yourself?

If you aren't using tcnative -- that is, you are using BIO or NIO
connector -- you might just have to set a system property. See these
references:

http://security.stackexchange.com/questions/33451/does-javas-implementation-of-ocsp-and-crl-checking-handle-intermediate-cas

and

http://docs.oracle.com/javase/7/docs/technotes/guides/security/certpath/CertPathProgGuide.html#AppC

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=ebjb
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to