| getsslocspresponderResult Structure Definition |
The getsslocspresponderResult structure defines the return type for getsslocspresponder API. |
Syntax |
Members |
rc |
If the method succeeds, rc is 0 else rc > 0. Values above 0x8000 indicate Warnings. |
message |
If the method succeeds, message is NULL else message contains Error/Warning message. |
sslocspresponderList |
List of sslocspresponders |
| sslocspresponder Structure Definition |
The sslocspresponder structure defines the actual return type values for getsslocspresponder API. |
Syntax |
Members |
name |
Name of the OCSP responder for which to show detailed information. |
url |
URL of the OCSP responder. |
cache |
Enable caching of responses. Caching of responses received from the OCSP responder enables faster responses to the clients and reduces the load on the OCSP responder. |
cachetimeout |
Timeout for caching the OCSP response. After the timeout, the Citrix ADC sends a fresh request to the OCSP responder for the certificate status. If a timeout is not specified, the timeout provided in the OCSP response applies. |
batchingdepth |
Number of client certificates to batch together into one OCSP request. Batching avoids overloading the OCSP responder. A value of 1 signifies that each request is queried independently. For a value greater than 1, specify a timeout (batching delay) to avoid inordinately delaying the processing of a single certificate. |
batchingdelay |
Maximum time, in milliseconds, to wait to accumulate OCSP requests to batch. Does not apply if the Batching Depth is 1. |
ocspurlresolvetimeout |
Time, in milliseconds, to wait for an OCSP URL Resolution. When this time elapses, an error message appears or the transaction is forwarded, depending on the settings on the virtual server. |
resptimeout |
Maximum time, in mS, to wait for an OCSP response before giving up. Defaults to 2000 mS. If this is set to 0, Citrix ADC will wait for an indefinite amount of time. |
producedattimeskew |
Time, in seconds, for which the Citrix ADC waits before considering the response as invalid. The response is considered invalid if the Produced At time stamp in the OCSP response exceeds or precedes the current Citrix ADC clock time by the amount of time specified. |
respondercert |
trustresponder |
A certificate to use to validate OCSP responses. Alternatively, if -trustResponder is specified, no verification will be done on the reponse. If both are omitted, only the response times (producedAt, lastUpdate, nextUpdate) will be verified. |
signingcert |
Certificate-key pair that is used to sign OCSP requests. If this parameter is not set, the requests are not signed. |
usenonce |
Add a nonce to the OCSP request. Protects against replay attacks. |
insertclientcert |
Include the complete client certificate in the OCSP request. |
ocspaiarefcount |
No of CA certs referencing this AIA responder |
httpmethod |
HTTP method used to send ocsp request. POST is the default httpmethod. If request length is > 255, POST wil be used even if GET is set as httpMethod |
ocspipaddrstr |
DNS resolved IP address. |
port |
Port number on which OCSP Server listens. |
_nextgenapiresource |
See Also |