12 lines
623 B
Markdown
12 lines
623 B
Markdown
# OCSPCRL
|
|
|
|
OCSPCRL is a minimal implementation of both a OCSP and CRL server in Golang. It provides the following http endpoints:
|
|
|
|
- `/ocsp` - OCSP responder
|
|
- `/crl` - CRL responder
|
|
|
|
All what you need is to provide a CRL file, the root certificate and cert/key with extendedKeyUsage `OCSPSigning` to allow the OCSP server to sign the OCSP responses.
|
|
When using OCSP, the certificate is checked against the CRL for validity.
|
|
|
|
Synchronization of the CAs CRL is out of scope of this project. You can use any mechanism to update the CRL file. Just notify the ocspcrl server process via `SIGHUP` signal to reload the CRL file.
|