F5 Sites
  • F5.com
  • F5 Labs
  • MyF5
  • NGINX
  • Partner Central
  • Education Services Portal (ESP)
Contact
  • Under Attack?
  • F5 Support
  • DevCentral Support
  • F5 Sales
  • NGINX Sales
  • F5 Professional Services
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
GroupsEventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. Articles
  3. Technical Articles

Building an OpenSSL Certificate Authority - Configuring CRL and OCSP

Certificate Revocation Lists We completed reviewing our PKI design considerations and created root and intermediary certificates completeing our two-tier certificate authority. Now we'll create ce...
Updated Jun 05, 2023
Version 2.0
aws
devops
ecc
for your lab
openssl
security
series-building-an-openssl-certificate-authority
Chase_Abbott's avatar
Chase_Abbott
Icon for Admin rankAdmin
I do stuff.
View Profile
RWood_383320's avatar
RWood_383320
Icon for Nimbostratus rankNimbostratus
Feb 08, 2019

When you create the OCSP key & certificate, your sample code uses the openssl_server.cnf (which you don't introduce until the next article) but when you sign the certificate you use the openssl_intermediate.cnf.

 

Does it matter if you switch between the two? Is there that much difference between the two config files?

 

Help guide the future of your DevCentral Community!

What tools do you use to collaborate? (1min - anonymous)

ABOUT DEVCENTRAL

DevCentral NewsTechnical ForumTechnical ArticlesTechnical CrowdSRCCommunity GuidelinesDevCentral EULAGet a Developer Lab LicenseBecome a DevCentral MVP

RESOURCES

Product DocumentationWhite PapersGlossaryCustomer StoriesWebinarsFree Online CoursesTraining & Certification

SUPPORT

Manage SubscriptionsProfessional ServicesCreate a Service RequestSoftware DownloadsSupport Portal

PARTNERS

Find a Reseller PartnerTechnology AlliancesBecome an F5 PartnerLogin to Partner Central

©2024 F5, Inc. All rights reserved.
TrademarksPoliciesPrivacyCalifornia PrivacyDo Not Sell My Personal Information