Jboss support in OCSP

[ronyktz]

I would like to know if (and how) does JBOSS support OCSP, in case of client based authentication (i.e. where JBOSS web server requires the client to authenticate himself using a certificate) - can JBOSS serve as an OCSP requester, and attempt to verify the certificate presented by the client?

[pilli]

Hello

I've been searching for this feature too. Have you found a solution?

I have client auth using SSL certificates working perfectly, but don't seem to be able to find more info about OCSP validation by JBoss.

[anil.saldhana]

https://jira.jboss.org/jira/browse/JBAS-3019

We have a long outstanding JIRA issue for CRL validation. I know it is not as real time as OCSP, but something in the pipeline.

[dejanmr]

J2SE has support for OCSP since version 5.0. Please check:
http://java.sun.com/j2se/1.5.0/docs/guide/security/pki-tiger.html

Did someone try to combine this with Jboss? Was it working as expected?

There is some useful info on article discussing this topic on glassfish:
http://weblogs.java.net/blog/kumarjayanti/archive/2007/11/ssl_and_crl_che.html

But, most of that article is just copied form the first one.