ocsp-enable

Syntax

ocsp-enable = {yes|no}

Description

Enable Online Certificate Status Protocol (OCSP) for checking the revocation status of certificates supplied by a server using the OCSP URL embedded in the certificate using an Authority Information Access (AIA) extension.

Options

yes
Enable OCSP to check the revocation status of server supplied certificates.
no
Disable OCSP checking of server supplied certificates.

Usage

This stanza entry is optional.
Note: This option can be used as an alternative to, or in conjunction with, the ocsp-url option.

Default value

no

Example

ocsp-enable = no