Re: [Ejbca-develop] CLI command to activate OCSP service of a specific CA

[Branko M. <br...@ma...>]

On Tue, 4 Jun 2013 10:49:53 -0700
孙伟 <kev...@gm...> wrote:

> I have been using EJBCA for my OCSP testing and it went well. Recently I am
> testing the CLI part of OCSP so I wonder is there a CLI command like
> "ejbca.sh ca activateocsp <ca name>" to activate the OCSP serivce of a CA
> on EJBCA? If yes, that would be great help since it can go to automation
> and it saves time.

Hello Kevin,

Are you referring to internal OCSP responder that's deployed in CA
mode, or stand-alone OCSP responder?

In case of internal OCSP responder, you activate it by activating the
CA tokens.

In case of stand-alone OCSP responder, you can activate it using EJBCA
client toolbox as outlined at:

http://www.ejbca.org/userguide-ocsp.html#Signature%20token%20activation

Then again, if you want to automate things, any reason why you wouldn't
set the activation code in your ocsp.properties file
(ocsp.p11.p11password) in the first place?

Best regards

-- 
Branko Majic
Jabber: br...@ma...
Please use only Free formats when sending attachments to me.

Бранко Мајић
Џабер: br...@ma...
Молим вас да додатке шаљете искључиво у слободним форматима.