F5 Sites
  • F5.com
  • LearnF5
  • NGINX
  • MyF5
  • Partner Central
Contact
  • Under Attack?
  • F5 Support
  • DevCentral Support
  • F5 Sales
  • NGINX Sales
  • F5 Professional Services
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
Groups
EventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. Articles
  3. Technical Articles

Building an OpenSSL Certificate Authority - Configuring CRL and OCSP

Certificate Revocation Lists We completed reviewing our PKI design considerations and created root and intermediary certificates completeing our two-tier certificate authority. Now we'll create ce...
Updated Jun 06, 2023
Version 2.0
aws
devops
ecc
for your lab
openssl
security
series-building-an-openssl-certificate-authority
Chase_Abbott's avatar
Chase_Abbott
Icon for Admin rankAdmin
I do stuff.
View Profile
RWood_383320's avatar
RWood_383320
Icon for Nimbostratus rankNimbostratus
Feb 08, 2019

When you create the OCSP key & certificate, your sample code uses the openssl_server.cnf (which you don't introduce until the next article) but when you sign the certificate you use the openssl_intermediate.cnf.

 

Does it matter if you switch between the two? Is there that much difference between the two config files?

 

ABOUT DEVCENTRAL

DevCentral NewsTechnical ForumTechnical ArticlesTechnical CrowdSRCCommunity GuidelinesDevCentral EULAGet a Developer Lab LicenseBecome a DevCentral MVP

RESOURCES

Product DocumentationWhite PapersGlossaryCustomer StoriesWebinarsFree Online CoursesF5 CertificationLearnF5 Training

SUPPORT

Manage SubscriptionsProfessional ServicesProfessional ServicesCreate a Service RequestSoftware DownloadsSupport Portal

PARTNERS

Find a Reseller PartnerTechnology AlliancesBecome an F5 PartnerLogin to Partner Central

F5 logo©2024 F5, Inc. All rights reserved.
TrademarksPoliciesPrivacyCalifornia PrivacyDo Not Sell My Personal Information