Default OCSP configuration

This article is valid for Nexus OCSP responder 6.1 and later.

This article describes the ocsp.conf file installed with Nexus OCSP Responder, that is, the default configuration.

The order of cryptographic providers used by the Nexus OCSP Responder.

ocsp.providers.1=org.bouncycastle.jce.provider.BouncyCastleProvider
ocsp.providers.2=com.id2tech.security.provider.ID2
ocsp.providers.3=com.id2tech.security.store.ID2Store

For more information, see Validation section.

CRL Validator

ocsp.validation.1.type=crl
ocsp.validation.1.cacheDir=crls
ocsp.validation.1.provider.1.type=push
ocsp.validation.1.provider.1.listen.url=http://*:8081/

CIL Validator

ocsp.validation.2.type=cil
ocsp.validation.2.cacheDir=cils
ocsp.validation.2.provider.1.type=push
ocsp.validation.2.provider.1.listen.url=http://*:8082/

For more information, see OCSP responder section.

Basic Responder

Non Issued Basic Responder

For more information, see Key management section.