JJarava
JJarava

Reputation: 590

OCSP libraries for python / java / c?

Going back to my previous question on OCSP, does anybody know of "reliable" OCSP libraries for Python, Java and C?

I need "client" OCSP functionality, as I'll be checking the status of Certs against an OCSP responder, so responder functionality is not that important.

Thanks

Upvotes: 5

Views: 3224

Answers (3)

Seth
Seth

Reputation: 11

OpenSSL is the most widely used product for OCSP in C. It's quite reliable, although incredibly obtuse. I'd recommend looking at apps/ocsp.c for a pretty good example of how to make OCSP requests and validate responses.

Vista and Server 2008 have built-in OCSP support in CAPI; check out CertVerifyRevocation.

Upvotes: 1

erickson
erickson

Reputation: 269817

Java 5 has support of revocation checking via OCSP built in. If you want to build an OCSP responder, or have finer control over revocation checking, check out Bouncy Castle. You can use this to implement your own CertPathChecker that, for example, uses non-blocking I/O in its status checks.

Upvotes: 3

maverick
maverick

Reputation:

Have you check pyOpenSSL.. am sure openssl supports ocsp and python binding may support it

Upvotes: 1

Related Questions