OCSP

Last Updated : Aug 28, 2026 |
Prolog information
Metadata
Keywords:
Online Certificate Status Protocol (OCSP) is optionally used to check the certificate revocation status of a server identity certificate presented to the phone during the establishment of a TLS connection. Use the following parameters to configure the phone to use OCSP.
OCSP configuration parameters
Parameter name
Type
Default
Description
OCSP_ENABLED
Numeric
0
Specifies whether OCSP is used to check server identity certificate revocation status. Valid values:
  • 0: OCSP is disabled (default)
  • 1: OCSP is enabled. OCSP checks the certificate revocation status for all TLS connections.
OCSP_ACCEPT_UNK
Numeric
1
Specifies whether to bypass certificate revocation for the undetermined revocation status.
Valid value:
OCSP_NONCE
Numeric
1
Specifies whether a nonce is added in OCSP requests and expected in OCSP responses.
Valid value:
OCSP_URI
String
NULL
Specifies the URI of an OCSP responder. The URI can be an IP address or hostname. Valid values contain 0 to 255 ASCII characters, zero or one URI.
OCSP_URI_PREF
Numeric
1
Specifies the preferred URI to use for OCSP requests when more than one source is available.
Valid values:
  • 1: Use the OCSP_URI and then the OCSP field of the Authority Information Access (AIA) extension of the certificate.
  • 2: Use the OCSP field of the Authority Information Access (AIA) extension of the certificate and then the OCSP_URI.
OCSP_TRUSTCERTS
String
NULL
Specifies a list of trusted CA certificates used to validate an OCSP response. These certificates are used when the OCSP responder has a different CA than the root CA of the certificate being checked for the revocation status.
This parameter supports 0 to 255 ASCII characters. The file names or URLs must be comma separated values without intervening spaces.
Define the file name in one of the following formats:
  • Absolute URL. For example,http://username:password@provisioning.example.com:8088/path/OCSP_Trust1.txt
  • Absolute Path, that ignores the defined HTTPDIR or TLSDIR values. For example, /path/OCSP_Trust1.txt
  • Relative Path, that appends to the defined HTTPDIR or TLSDIR values. For example, path/OCSP_Trust1.txt
OCSP_HASH_ALGORITHM
Numeric
0
Specifies the hashing algorithm for the OCSP request.
Valid values:
OCSP_USE_CACHE
Numeric
1
Specifies that the OCSP caching is in use.
Valid values:
OCSP_CACHE_EXPIRY
Numeric
2880
Specifies the time interval for the OCSP cache expiry in minutes.
Valid range is from 60 to 10080 (60 minutes to 7 days, with 2880 (2 days) as default.
Note:
OCSP response cache expiry uses nextUpdate value in OCSP response message. If nextUpdate is not present, then OCSP_CACHE_EXPIRY parameter value is used.