Topic
6 replies Latest Post - ‏2012-02-29T15:52:03Z by NPfister
NPfister
NPfister
43 Posts
ACCEPTED ANSWER

Pinned topic OCSP z/OS

‏2012-02-22T18:25:38Z |
I have another question:

We have absurdly large CRLs, and I have a PMR open for the issue. But my question is this; is there any plan to support OCSP in the z/OS version of IBM HTTP Server? This would be a very nice feature, and is actually something our organization asked for in a FITS requirement which was accepted prior to z/OS 1.10.

Thanks.
Updated on 2012-02-29T15:52:03Z at 2012-02-29T15:52:03Z by NPfister
  • SystemAdmin
    SystemAdmin
    3908 Posts
    ACCEPTED ANSWER

    Re: OCSP z/OS

    ‏2012-02-22T19:40:52Z  in response to NPfister
    Do you know if System SSL has OCSP client capability and where it went in? Every hit I get is for the OCSP server in z/OS.
    • NPfister
      NPfister
      43 Posts
      ACCEPTED ANSWER

      Re: OCSP z/OS

      ‏2012-02-22T19:51:07Z  in response to SystemAdmin
      I don't believe that it does...I guess that would be a good prerequisite for what I'm asking. Is there a forum that I can ask about that capability for System SSL?

      As far as I know the only capabilities System SSL Has is as an OCSP server, not a client.
    • Sunit
      Sunit
      182 Posts
      ACCEPTED ANSWER

      Re: OCSP z/OS

      ‏2012-02-24T14:32:03Z  in response to SystemAdmin
      Based on what I have read, z/OS System SSL has OCSP server functionality. So, if you were to host CA on z/OS you can provide OCSP support to clients but it does not have OCSP client functionality.

      • Sunit
      • NPfister
        NPfister
        43 Posts
        ACCEPTED ANSWER

        Re: OCSP z/OS

        ‏2012-02-29T14:18:52Z  in response to Sunit
        Right, no support for OCSP as a client, but it does have server support. Is there somewhere that I could ask the SSL folks if they are ever planning on adding that support? It is something that would be very useful to my organization, as we have huge CRLs.
        • SystemAdmin
          SystemAdmin
          3908 Posts
          ACCEPTED ANSWER

          Re: OCSP z/OS

          ‏2012-02-29T15:38:05Z  in response to NPfister
          Unfortunately I think the best you can do is the FITS marketing database or mail-bomb any advocate-types you have inside of IBM
          • NPfister
            NPfister
            43 Posts
            ACCEPTED ANSWER

            Re: OCSP z/OS

            ‏2012-02-29T15:52:03Z  in response to SystemAdmin
            Thanks. I'll keep trying with our advocates....and probably try opening another FITS requirement and hope that it goes better than the last one.