Le jeudi 19 mars 2015 09:36:35 UTC+1, LuxTrust CA a écrit :
> With regards to the issues raised by Jesus F., LuxTrust proposes the 
> following answers :
> Regarding issue #1: OCSP do not respond using GET method (BR section 13.2.2) 
> :
> The feature is operational since 11th march 2015.  We successfully made OCSP 
> requests using the GET method.

It still doesn't work. Your OCSP responder doesn't accept properly URL-encoded 
requests:
 OCSP req
  -> Base64 (may contain '/', '+', and '=' chars)
    -> URL-encoded (changes those into '%2F', '%2B', and '%3D' respectively)

_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to