<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title><![CDATA[wolfSSL - Embedded SSL Library — OCSP Stapling]]></title>
		<link>https://www.wolfssl.com/forums/topic2156-ocsp-stapling.html</link>
		<atom:link href="https://www.wolfssl.com/forums/feed-rss-topic2156.xml" rel="self" type="application/rss+xml" />
		<description><![CDATA[The most recent posts in OCSP Stapling.]]></description>
		<lastBuildDate>Wed, 04 Sep 2024 08:48:22 +0000</lastBuildDate>
		<generator>PunBB</generator>
		<item>
			<title><![CDATA[Re: OCSP Stapling]]></title>
			<link>https://www.wolfssl.com/forums/post7829.html#p7829</link>
			<description><![CDATA[<p>Hello,</p><p>You can add a custom OCSP answer by specifying a custom OCSP lookup callback with `wolfSSL_CTX_SetOCSP_Cb`. <br />The custom callback can analyze the URL and the request and provide a custom OCSP response.<br />For example to provide always the same ocsp response you can use:</p><p>```<br />uint8_t static_ocsp_response[] = { /* OCSP response bytes */ };<br />int ocsp_response_cb(void* Ioctx, const char* url, int urlSz,<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unsigned char* req, int reqSize, unsigned char**resp)<br />{<br />&nbsp; &nbsp; *resp = static_ocsp_response;<br />&nbsp; &nbsp; return sizeof(static_ocsp_response);<br />}</p><p>``` </p><p>I attached a small PoC on how to use the custom cb to provide a static ocsp response.</p><p>Regards,<br />Marco</p>]]></description>
			<author><![CDATA[null@example.com (marco)]]></author>
			<pubDate>Wed, 04 Sep 2024 08:48:22 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post7829.html#p7829</guid>
		</item>
		<item>
			<title><![CDATA[OCSP Stapling]]></title>
			<link>https://www.wolfssl.com/forums/post7804.html#p7804</link>
			<description><![CDATA[<p>Hello,<br />I am trying to setup a POC using OCSP stapling feature implemented in WolfSSL lib<br />The client has to check the validity of server certificate, then the server has to attach with its certificate the OCSP response.<br />I don’t want specify an URL for OCSP responder because I want to simulate the OCSP answer and so manage that directly into the server’s code.<br />To do that I am looking the APIs to use on server side to upload the simulated OCSP answer into the SSL session.<br />I didn’t find any APIs in API index neither in “OCSP Support web page”<br />Do you have any idea/recommendation to implement that … <br />By advance thanks</p>]]></description>
			<author><![CDATA[null@example.com (nicolas.ane)]]></author>
			<pubDate>Tue, 20 Aug 2024 08:47:01 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post7804.html#p7804</guid>
		</item>
	</channel>
</rss>
