Reputation: 590
Going back to my previous question on OCSP, does anybody know of "reliable" OCSP libraries for Python, Java and C?
I need "client" OCSP functionality, as I'll be checking the status of Certs against an OCSP responder, so responder functionality is not that important.
Thanks
Upvotes: 5
Views: 3224
Reputation: 11
OpenSSL is the most widely used product for OCSP in C. It's quite reliable, although incredibly obtuse. I'd recommend looking at apps/ocsp.c for a pretty good example of how to make OCSP requests and validate responses.
Vista and Server 2008 have built-in OCSP support in CAPI; check out CertVerifyRevocation.
Upvotes: 1
Reputation: 269817
Java 5 has support of revocation checking via OCSP built in. If you want to build an OCSP responder, or have finer control over revocation checking, check out Bouncy Castle. You can use this to implement your own CertPathChecker that, for example, uses non-blocking I/O in its status checks.
Upvotes: 3
Reputation:
Have you check pyOpenSSL.. am sure openssl supports ocsp and python binding may support it
Upvotes: 1