Problem
If CA is offering both free and paid versions of OCSP then Security Server administrator must be able to choose which service to use. Ideally it should be possible to select:
Use only paid OCSP address
Use only free OCSP address
Use free OCSP address first and if it does not fork then use paid OCSP
Currently security server would probably use any OCSP address in any order if central server defines multiple OCSP addresses.
One of the possible ways to achieve the goal would be addition to Security Servers "/sysparams" page so that it would be possible to select used OCSP addresses in the correct order. By default OCSP addresses should be used as in current implementation.
Affected components: SS-UI Affected documentation: SS-UG Estimated delivery: - External reference: https://jira.ria.ee/browse/XTE-351
Problem If CA is offering both free and paid versions of OCSP then Security Server administrator must be able to choose which service to use. Ideally it should be possible to select:
Currently security server would probably use any OCSP address in any order if central server defines multiple OCSP addresses.
One of the possible ways to achieve the goal would be addition to Security Servers "/sysparams" page so that it would be possible to select used OCSP addresses in the correct order. By default OCSP addresses should be used as in current implementation.
Acceptance criteria