OCSP validation of client certificates

Hi Forum,
I see that nGinx supports configuration to perform OCSP
validation of
server side certificates and staple the validation response to the
client.
My question is whether nGinx supports OCSP validation of client
presented
certificates.

I seem to hit a dead end with documentation for that question. Would be
helpful if someone could answer this.

Thanks in advance for your time.

Posted at Nginx Forum:

Hello!

On Thu, Jan 02, 2014 at 05:03:36PM -0500, nginx_developer wrote:

Hi Forum,
I see that nGinx supports configuration to perform OCSP validation of
server side certificates and staple the validation response to the client.
My question is whether nGinx supports OCSP validation of client presented
certificates.

I seem to hit a dead end with documentation for that question. Would be
helpful if someone could answer this.

No. Only explicitly loaded CRLs are supported, see
Module ngx_http_ssl_module.


Maxim D.
http://nginx.org/