Menu

Home

Christian Hohnstaedt

X Certificate and Key management is an interface for managing asymetric keys like RSA or DSA. It is intended as a small CA for creation and signing certificates. It uses the OpenSSL library for the cryptographic operations.

Screenshot thumbnail
Certificate view


Project Admins:


Discussion

  • Andreas

    Andreas - 2018-02-10

    Hi,

    in the moment I'm trying to create a certificate with ocsp validation. I create a CA and a webserver-certificate an provide the adress of my ocsp instance. I also enable the option "ocsp signing" as an extended key usage. When I open the URL of my webserver (https) I expect, that firefox will create an ocsp request to validate my certificate. But nothing happens. The borwser opens the https conection and shows the correct website.

    When I open the certificate from the browser, I see that it contains the correct url to my ocsp instance. Is there any known issue with the ocsp option in xca?

    Kind Regards,

    P.S. Hopefully this is the right place for my request.

     

    Last edit: Andreas 2018-02-10
  • Christian Hohnstaedt

    Is there any known issue with the ocsp option in xca?

    XCA uses the OpenSSL mechanisms to add the entry, so I don't think there is anything XCA can do differently.
    Did you try an other browser? They (IE, FF, Chrome) are known to behave differently.

     

Log in to post a comment.