Asking help about the check the Certificate Status with OCSP with TLS Connection?

[darapenhchet]

Dear Mr/Mrs ,

Could I ask you about how to check the Certificate Status with OCSP Responder with TLS Connection?

Best Regards,
Dara Penhchet

[Hakky54]

Hi,

I found two good examples which demonstrates how to do it at github, see:

• https://github.com/frohoff/jdk8u-dev-jdk/blob/master/src/share/classes/sun/security/provider/certpath/OCSP.java
• https://github.com/wdawson/revoker

What you need to do is grab the crl or ocsp url within the certificate chain and validate it.
If we look at the certificate of github itself, these urls are present for both crl and ocsp.

I will try to include an example within this projects for this use case, but it wont be within a month or two..