add notes about ocsp server

2025-02-19 11:37:57 -05:00
parent 3cd43f6b95
commit 33223c0c06
1 changed files with 9 additions and 0 deletions
--- a/systemd/incubating/freeipa/freeipa.md
+++ b/systemd/incubating/freeipa/freeipa.md
@@ -300,6 +300,15 @@ openssl x509 -in reese-crt.pem -text -noout
 openssl x509 -outform der -in reese-crt.pem -out reese-crt-der.cer
 ```

+OCSP Server
+
+<https://bhashineen.medium.com/create-your-own-ocsp-server-ffb212df8e63>
+
+```bash
+openssl req -new -nodes -out ocspSigning.csr -keyout ocspSigning.key
+openssl ca -keyfile rootCA.key -cert rootCA.crt -in ocspSigning.csr -out ocspSigning.crt -config validation.conf
+```
+
 ### PIV Smart Card (Taglio) WIP

 <https://github.com/OpenSC/OpenSC/wiki/Using-pkcs11-tool-and-OpenSSL>