DETAILS (continued) 4. Can the OCSP Responder generate Self-Signed OCSP Responder certificates and/or SSL certificates? 5. Can the OCSP Responder import CRLs from files? 6. Which HSMs has the OCSP Responder been tested with? 7. Is the OCSP Responder dependent on any certificate extensions? (serviceLocator, AuthorityInformationAccess, etc.) COMMUNICATION PROTOCOLS AND OCSP EXTENSIONS 8. What protocols does the OCSP Responder use HTTP to process OCSP requests? HTTPS (Check all that apply) 9. Does the OCSP Responder accept both signed Signed and unsigned OCSP requests? Unsigned (Check all that apply) HTTP 10. What protocols does the OCSP Responder HTTPS use to retrieve CRLs? LDAP (Check all that apply) LDAPS Nonce 11. What optional OCSP extensions does the CRL Reference OCSP Responder support? Acceptable Response Type (Check all that apply) Archive Cutoff
DETAILS (continued) 4. Can the OCSP Responder generate Self-Signed OCSP Responder certificates and/or SSL certificates? 5. Can the OCSP Responder import CRLs from files? 6. Which HSMs has the OCSP Responder been tested with? 7. Is the OCSP Responder dependent on any certificate extensions? (serviceLocator, AuthorityInformationAccess, etc.) COMMUNICATION PROTOCOLS AND OCSP EXTENSIONS 8. What protocols does the OCSP Responder use to process OCSP requests? (Check all that apply) HTTP HTTPS 9. Does the OCSP Responder accept both signed and unsigned OCSP requests? (Check all that apply) Signed Unsigned 10. What protocols does the OCSP Responder use to retrieve CRLs? (Check all that apply) HTTP HTTPS LDAP LDAPS 11. What optional OCSP extensions does the OCSP Responder support? (Check all that apply) Nonce CRL Reference Acceptable Response Type Archive Cutoff
jitc_ocsp_responder_assessment_worksheet.docx