i'm trying to test the following case:
old OCSP responder (e.g. responder) still valid and active. i create a new OCSP responder (e.g. responder-renew) and set to active.
Both of two active OCSP responder issued by same CA, so that DN is same when i set default OCSP responder as below command: ./ejbca.sh ocsp setdefaultresponder --dn "xxx"
how can i swap to use the newly created OCSP responder => responder-renew ?
any command can do that instead of disable the old OCSP responder?
Thanks.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
i'm looking for a better step to set the newly created OCSP responder (responder-renew) take effective immediately. Looks there are delay when i disable the old OCSP responder and set active to the newly created one.
Last edit: Stockton 2024-05-16
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
i'm trying to test the following case:
old OCSP responder (e.g. responder) still valid and active. i create a new OCSP responder (e.g. responder-renew) and set to active.
Both of two active OCSP responder issued by same CA, so that DN is same when i set default OCSP responder as below command: ./ejbca.sh ocsp setdefaultresponder --dn "xxx"
how can i swap to use the newly created OCSP responder => responder-renew ?
any command can do that instead of disable the old OCSP responder?
Thanks.
i'm looking for a better step to set the newly created OCSP responder (responder-renew) take effective immediately. Looks there are delay when i disable the old OCSP responder and set active to the newly created one.
Last edit: Stockton 2024-05-16
Discussions have moved to https://github.com/Keyfactor/ejbca-ce/discussions
Please state which version of EJBCA you are using when posting there and explain what commands you use.