Forum Discussion
Kristof_Goossen
Nimbostratus
Feb 01, 2010possible ocsp:serponse:status values
Hi all,
I am doing certificate verification in an iRule and want to pass the OCSP status on to the next network component.
Does anyone know where I could find all possible values of ocsp:response:status?
I already encountered:
* good
* revoked
* internalerror
* [empty string] (if no certificate was provided)
Are there other possible values?
The code looks as below:
----------------------------------------------------------------
set auth_response_data [AUTH::response_data]
set ocsp_status [lindex [array get auth_response_data ocsp:response:status] 1]
----------------------------------------------------------------
Any help would be much appreciated,
Kristof
2 Replies
- hoolio
Cirrostratus
Hi Kristof,
I think those are it. Ideally, you would check if there is a client cert before bothering with the OCSP call to save time/resources.
Aaron - Kristof_Goossen
Nimbostratus
Thx Aaron!
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
