Hi.You can use openca-ocspd .It reads CRL and quite robust.Cheers Scotty
On Wednesday 14 August 2024 at 03:20:44 pm GMT+5, Martin Bartosch via
OpenXPKI-users <[email protected]> wrote:
Hi,
> Can someone help me or tell me which OCSP I can take. I read that one of
> EJBCA took it.
You can use any OCSP responder that either reads a standard CRL or accesses the
OpenXPKI database.
Personally I tried the EJBCA OCSP responder some time ago and I am not too fond
of it. It's a huge, sluggish and resource-hungry beast.
For OpenXPKI Enterprise Edition we offer an extremely efficient and blazingly
fast OCSP responder that accesses the OpenXPKI database and which also can be
easily operated distributed. However, this is not available for the Community
Edition.
> Does anyone have an idea? And what is the easiest way to get the CRL list
> exported without accessing the WebGui.
Configure the CRL publishing connector as required. The default configuration
already writes the CRL to the file system, so you can simply use that. Automate
CRL issuance by invoking the crl_issuance workflow for the desired realm via
openxpkicmd crl_issuance --realm REALM
Cheers
Martin
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
