Revoke OCSP for the entire certificate chain

Question

When you ask the OCSP server to check the revocation status of a certificate, does it automatically check the revocation status of the entire chain?

ie: if he says the certificate is “good”, does that mean the whole chain is good?

but it still seems unclear to me.

Wikipedia mentions OCSP chain queries:

+5

Anthony May 04 '12 at 14:58

1 answer

Cheekysoft · Accepted Answer · 2012-05-04T15:12:35+0000

The OCSP responder only checks the status of the specific certificate specified in the OCSP request. The defendant will ignore the rest of the chain.

OCSP, , , , SSL, . , SSL . , , ( ) OCSP, OCSP.

, OCSP HTTP- - - , , , , OCSP (Apache 2.4+ ..), OCSP , , ( , , , , , ).

, , OCSP. , , , , .