OCSP conditional use_nonce

Emile Swarts emile.swarts123 at gmail.com
Wed Apr 6 13:20:07 UTC 2022


Hi,

We're checking certificates against an OCSP endpoint, which doesn't support
nonce.

Everything works fine, and we've added this to the eap module configuration:
      use_nonce = no

The plan is to support multiple PKIs in the future and were wondering what
the most elegant way would be to support OCSP endpoints that support nonce
and ones that don't.

Is there a way to set this value at runtime based on request attributes?

Regards,
Emile


More information about the Freeradius-Users mailing list