/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.hboeck.de
The Problem with OCSP Stapling and Must Staple and why Certificate Revocation is still broken - Hanno's blog
| | sslmate.com
How to Configure OCSP Stapling in Apache and nginx - SSLMate Blog
1.4 parsecs away

Travel
| | [AI summary] A technical guide explains what OCSP stapling is, its benefits for security and privacy, and provides specific configuration instructions for Apache and Nginx servers.
| | bridge.grumpy-troll.org
OCSP Oops! : The Grumpy Troll
3.1 parsecs away

Travel
| | [AI summary] A systems engineer details their deployment and debugging experience with OCSP stapling for mail servers, highlighting the complexities of certificate validation and renewals.
| | www.grc.com
GRC's|SSL/TLS Certificate Revocation Awareness - The case for OCSP Must-Staple
1.7 parsecs away

Travel
| | SSL/TLS Certificate Revocation Awareness - The case for OCSP Must-Staple
| | sgued.fr
Is this certificate DER or PEM encoded It turns out, both at the same time
20.1 parsecs away

Travel
| X509 certificate can be encoded either as DER or PEM. DER encoding is an efficient binary format, while PEM encoding is a wrapper around the Base 64 DER encoding of the certificate. Usually, when dealing with a specific certificate, you know beforehand whether it's encoded as DER or PEM. For example, in the opennssl CLI, you can give it the -inform parameter, which accepts either DER or PEM. However, what if don't know the encoding of the certificate, can you figure it out on the fly?