topic Re: Configuring OCSP in General Topics

Configuring OCSP

sgoethals — Wed, 06 Jun 2018 15:41:05 GMT

I am trying to configure OCSP and I am a little confused.

I have added an OSCP responder.

It appears the second step is to allow the Firewall to use it by configuring Device-Management->Interfaces. However, for most of my settings, I am using a Service Route Configuration and I don't see HTTP OCSP listed as an option in Service Route. Is there a way to tell the firewall to use a service route instead of the management interface?

I also see references online (albeit old) that indicates I need to turn on HTTP OCSP for an Interface Management Profile that is used for a specific interface. If this is the case, what interface should be used?

Could someone provide me with some guidance?

Thanks,

Re: Configuring OCSP

gwesson — Wed, 06 Jun 2018 17:11:47 GMT

If your OCSP responder IP is your management IP address, then you need to configure that for HTTP OCSP:

If you're using a service route (a dataplane interface) instead, you'll need to enable HTTP OCSP as an interface profile instead, and assign that profile to the appropriate interface:

Re: Configuring OCSP

sgoethals — Wed, 06 Jun 2018 22:23:35 GMT

Thanks for the information. I appreciate it.