Okay, I guess I'm not making the connection when you say the purpose OCSP is to verify a clients SSL cert. In my case, not really. OCSP is just another form a revocation checking, focusing on the delta . OCSP is not just for SSL connections, and used to only validate a SSL based certificate. OCSP is just a flavor of validity checking against a certificate, SSL based, SMIME-Email based, etc. So, I guess back to my question of if I have a OCSP responder internal, and want to setup some irule base on my F5 to redirect clients validating revocation in the form of an OCSP check, how could I do this with our F5 and iRules safely
I very much appreciate your response, just want to clarify a bit further from my end..
Thank you, please let me know your thoughts..
J
Nimbostratus