cadn
Use this parameter to decide whether to check CA Names against the issuer of the certificate being checked for revocation.
|
DN |
CADN |
OCSPConfiguration |
|
Present |
— |
Can be used to contact the configured responder. |
|
Absent |
Empty |
Can be used to check the revocation status of any certificate. |
|
Absent |
Populated |
Should not be used to check the revocation status of the certificate in question |
Parameter syntax
<config_name>.cadn.<number> = <value>Where:
<value> is the DN of the CA for which this OCSP configuration should be used.
<number> is an integer starting with 0 and incrementing by 1 for each certificate configured.
When omitting this parameter, OCSP configuration can be used to check the revocation status of all certificates.
Parameter example
config0.cadn.0 = cn=CA1, o=Entrust, o=caconfig0.cadn.1 = cn=CA2, o=Entrust, o=caconfig0.cadn.2 = cn=CA3, o=Entrust, o=ca