我们可以在tomcat中配置OCSP,
<Connector port="8443"
protocol="org.apache.coyote.http11.Http11AprProtocol"
secure="true" scheme="https"
SSLEnabled="true" SSLCertificateFile="/path/to/ocsp-cert.crt"
SSLCertificateKeyFile="/path/to/ocsp-cert.key"
SSLCACertificateFile="/path/to/ca.pem"
SSLVerifyClient="require"
SSLVerifyDepth="10"
clientAuth="true"/>
Run Code Online (Sandbox Code Playgroud)
如tomcat文档中所述,https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Using_OCSP_Certificates
但是根据该文档,无论是在服务器端(用于撤销客户端证书)还是在客户端(用于撤销服务器证书),我都没有得到执行OCSP的地方?