activemq-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dejan Bosanac <de...@nighttale.net>
Subject Re: Configure OCSP CRL Checking
Date Thu, 17 Dec 2015 10:29:16 GMT
Hi Lectrismo,

take a look at "bin/env” file in your ActiveMQ distribution. There you can
set system properties.

Please let us know how it works. I started working on an example for this,
but never finished it. I hope to get back to that soon.

Regards
--
Dejan Bosanac
about.me/dejanb

On Thu, Dec 17, 2015 at 7:36 AM, Lectrismo <m.j165@yahoo.de> wrote:

> Hey Guys,
>
> I'm new to ActiveMQ and started to configure an instance hosted on Windows
> Server 2012R2.
> It recently works fine with client certificate-based authentication which I
> set up in the past days.
> Now I wanted to configure CRL checking via OCSP because a static crl List
> is
> only loaded on service start.
> Thats a little bit too static for me. That's why we set up an OCSP
> responder
> and wanted to configure it in ActiveMQ.
> I found the following snippet on the offical Apache ActiveMQ Website (How
> do
> I use SSL):
>
> This list is static and loaded on broker startup.
> *You can also enable more advanced Online Certificate Status Protocol
> (OCSP)
> protocol by setting appropriate system properties *
> (in ${ACTIVEMQ_HOME}/bin/env) like
>
> ACTIVEMQ_SSL_OPTS="-Dcom.sun.security.enableCRLDP=true -Docsp.enable=true
> -Docsp.responderURL=http://ocsp.example.net:80"
>
> Could anyone tell me please where to paste it and what to do next (service
> restart, server reboot, etc..)?
>
>
> many thanks in advance,
> Lectrismo
>
>
>
> --
> View this message in context:
> http://activemq.2283324.n4.nabble.com/Configure-OCSP-CRL-Checking-tp4705089.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message