[SmartcardServices-Users] How can I specify alternate OCSP URL in OCS X?
Paul Kwan
paul.kwan at centrify.com
Mon Jan 4 14:59:49 PST 2010
Hi Shawn,
Thanks for the quick response as always. Can you please tell me what are
the 3rd party products you refer to? Thanks again.
PSK
On 1/4/10 12:37 PM, "Shawn A. Geddis" <geddis at apple.com> wrote:
> On Jan 4, 2010, at 2:19 PM, Paul Kwan wrote:
>> Hi ALL,
>>
>> I can specify a different OCSP URL other than the one on my Smart Card
>> with Windows client? Is there a way I can do the same on OS X? Thanks for the
>> help.
>>
>> PSK
>> _______________________________________________
>> SmartcardServices-Users mailing list
>> SmartcardServices-Users at lists.macosforge.org
>> http://lists.macosforge.org/mailman/listinfo.cgi/smartcardservices-users
>
> Paul,
>
> No. Mac OS X enforces what is in the certificate, because that is what can be
> absolutely validated.
>
> There are third-party products which have incorporated additional services to
> rewrite/process the Cert Revocation URI found in the Cert to a *configurable*
> URI -- allowing you to go from CRLDistribution Points to AIA Extensions (for
> OCSP).
>
> __________________________________________________
> Shawn Geddis geddis at mac.com
> Security Consulting Engineer
>
> MacOSForge Project Lead: Smart Card Services
> Web: http://smartcardservices.macosforge.org/
> Lists: http://lists.macosforge.org/mailman/listinfo
> __________________________________________________
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/smartcardservices-users/attachments/20100104/7a665836/attachment.html>
More information about the SmartcardServices-Users
mailing list