OCSP Responder with Self-Signed Certificate

[fhewiufhwefhwe]

Following https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIzCAK, I created an OCSP responded.  When creating the user certificates, for signed by I tried both the Root and Intermediate certificate.  I allowed HTTP_OCSP on both device->setup->Interfaces->Management as well as Network->Interfaces->Network Profiles->Interface Mgmt that corresponds to my interface.  I also created a security policy to all ocsp from my machine to the firewall.

From the CLI, when I typed in the command: debug sslmgr view ocsp all

Nothing is coming back however.  Any idea what could be the problem?

Do I have to download the certificate and try to use it with vpn before the debug sslmgr view oscp all command will show anything?

[fhewiufhwefhwe · Accepted solution]

Finally figured out the missing step from another article.  I need to go to Device -> Setup -> Session -> Decryption Certificate Revocation Settings

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/certificate-management/set-up-verification...