CODEWITHSUNDEEP
mobilejava-medigital-certificateocsp
Durojaiye Luqman
Durojaiye Luqman

Reputation: 31

How to Send OCSP Request and receive OCSP response on Mobile Phone

I need to make comparison (on the basis of time) on OCSP request/response between a mobile device and desktop clients. I understand that one can use OpenSSL and other similar command line tools to check OCSP on desktop clients. But I don’t know how to go about making OCSP request on a mobile phone. I want to send OCSP request for known certificate (e.g Facebook's) to its OSCP URL (http://ocsp.digicert.com) and obtain the certificate's revocation status. Is there any tool or a guide on sample code (preferably J2ME) that I can use to send OCSP request and get response? I understand that the BouncyCastle library for mobile devices has some sample classes related to OCSP. I have gone through but I have not been able to make much sense from them.

Upvotes: 0

Views: 3088

Answers (1)

Khanna111
Khanna111

Reputation: 3923

You could base64 the OCSP request and send it across on HTTP to the OCSP URL and then time it. Note that there might be a CDN that would serve the OCSP Response and that would factor in with the latency as well by reducing it. How do you create an OCSP Request: http://unmitigatedrisk.com/?p=42

Upvotes: 0

Related Questions