Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING Manual page 84

Adobe LiveCycle
Installing and Configuring LiveCycle Security Products for JBoss
Record type
ocsp
Attribute
URL
SendNonce
CheckRevocation
MaxClockSkew
ResponseFreshness
URLToConsult
SignRequest
Description
(Optional) The local OCSP Server URL. This attribute is used
only when the
URLToConsult
in this table) is set to
LocalConfig
LocalConfigIfNoAIA
(Optional) Specifies whether to send a random number in
the OCSP request to prevent replay attacks. The default value
is .
true
(Optional) Specifies whether the revocation checking on the
OCSP certificates is turned on or off. You can set this attribute
to one of the following values:
: Never checks.
Never
●
: Try to if possible. No error if no revocation
BestEffort
●
information is available.
RequiredIfInfoAvail
●
returned if available.
: Revocation checking is always
AlwaysRequired
●
required.
The default value is
RequiredIfInfoAvail
(Optional) The maximum allowed skew in response time and
local time (in minutes). The default value is
(Optional) The maximum time validity of a preconstructed
OCSP response (in minutes). The default value is
(one year).
(Optional) The URL to be used for OCSP checking. You can set
the attribute to one of the following values:
AIAInCertToCheck
●
: Use the local URL provided using the URL
LocalConfig
●
pref. (See the previous description of OCSP URL, in this
table.)
LocalConfigIfNoAIA
●
provided in the certificate.
The default value is
AIAInCertToCheck
indicates that the URL should be present in the certificate.
(Optional) Specifies whether to sign the request. The default
value is .
false
Content and Format of the trust.xml File
prefs element (Plug-in preferences)
attribute (see attribute later
or
.
: Revocation information is
.
.
5
: Use URL from the certificate.
: Use local URL if none is
. The default value
84
525600