jct-ocsp-url

jct-ocsp-url = <OCSP Responder URL>

Description

Specifies the URL for the OCSP Responder. If a URL is provided, WebSEAL uses OCSP for all revocation status checking regardless of Whether the certificate has an Authority Information Access (AIA) extension, which means that OCSP works with existing certificates. WebSEAL tries the OCSP Responder configured by this method first, rather than using a location specified by AIA extension. If revocation status is undetermined, and if jct-ocsp-enable is set to yes, then WebSEAL tries to obtain revocation status using the access method in the AIA extension.

Options

Usage: Optional

Default: None

Example:

jct-ocsp-url = http://responder.ibm.com/

Parent topic: [junction] stanza