OCSP response
Click on the red underlined text to get to the source
... OCSP [RFC2560] offers a useful alternative. The size of an OCSP
response is bounded and small and therefore suitable for in-band
IKEv2 ...
... responds with a CERT payload containing the appropriate OCSP
response. This content is recognizable via the same "OCSP Content"
identifier ...
... the definition and behavior specified in Section 3.1.
OCSP response:
An OCSP response ...
... hashes in the CERTREQ message is not
needed since the OCSP response is signed by the CA who issued the
certificate ...
... CA who issued the
certificate. In case of (c), the OCSP response is signed by the CA
Designated Responder ...
... OCSP Response ...
... payload carrying a certificate can be achieved by matching the
OCSP response CertID field to the certificate. See [RFC2560] for the
...
... CERTREQ sender SHALL incorporate the
OCSP response into path validation logic defined by [RFC3280].
...
... acquire the related OCSP-based assertion and produce and transmit an
OCSP response CERT payload corresponding to the certificate ...
... IKEv2 exchange.
The means by which an OCSP response may be acquired for production of
an OCSP response CERT ...
... The means by which an OCSP response may be acquired for production of
an OCSP response CERT payload is out of scope of this document.
...
... payload carrying its certificate
and an OCSP response CERT payload covering that certificate ...
... Responder returns its certificate and a
separate OCSP response CERT payload covering that certificate ...
... OCSP Requests are simply index values into these data.
Thus, it is easily inferred that OCSP responses can be produced in
the absence of a corresponding request (provided that OCSP nonces ...
... 3.1, is used in place of an OCSP request syntax to trigger production
and transmission of an OCSP response. OCSP, as defined in [RFC2560],
...
... replay attack and the costs associated with its successful
execution." Nodes SHOULD make the required freshness of an OCSP
response configurable.
...