Certificate revocation configuration field descriptions

Last Updated : Nov 01, 2023 |

Name

Description

Certificate Revocation Validation

Specifies the validation method for revocation check on the certificate.

The options are:

  • NONE: OCSP revocation check would not be performed.

  • BEST_EFFORT: Enables the secure connection only if certificate is not revoked and if certificate whose revocation status cannot be fetched(for example: network issues).

  • MANDATORY: Enables the secure connection only if certificate is not revoked.

OCSP Local URI

Specifies local OCSP Responder URI. This field is mandatory if the OCSP URI Preference field is set to Local.

OCSP URI Preference

Specifies which OCSP Responder URL is used first for revocation check.

  • CERT: From the certificate AuthorityInfoAccess extension.

  • LOCAL: From OCSP Local URI.