ocsp and certificat revoked

[EL OUASSAIDI Abdo Lkarim]

I have a problem of understanding ocsp and crl.

scenario:

the ocsp server check crl hourly.

- At one o'clock, the server check the crl and find the status of the 
certificat (serial number=1) is good.

- At half past one, the certificat (serial number=1) is revoked.

- 5 minutes later, a client ask the ocsp server about the status of the 
certificat (serial number=1) and the server responds "good". But the 
certificat is revoked.

Does this scenario can be true?

Thanks

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]