OSCP Setup
Introduction
Document Number
ENG-01
Purpose
The purpose of this document is to set up the OCSP features of the Tellabs OLAN product.
Applies To
All Tellabs OLTs and ONTs.
What is OCSP
Online Certificate Status Protocol (OCSP) is used to check whether a digital certificate is valid or if it has been revoked.CAs are central to issuing and managing digital certificates, ensuring secure communications, and verifying user identities. This is accomplished through the public key infrastructure (PKI) X.509 certificate, which contains information like the owner’s name and public key, the name of the issuing CA, the certificate’s validity date, and what it can be used for.
Digital certificates are vital to guaranteeing trust on the internet, like a digital identification card for websites. So, certificate revocation is crucial to mitigating vulnerabilities and potential key compromise.
Certificates are revoked automatically when certificate is outdated (usually 2 years) or by a site administrator that that the certificate is revoked.
When a certificate validity request is made, an OCSP request is submitted to an OCSP responder, which is a server operated by the issuing CA. The OCSP responder checks the request’s validity with a trusted CA, which advises whether the certificate is valid or not, with a response of current, revoked, or unknown.
The two OSCP setups are ONT EMS Setup for the PON and OLT CLI Setup for the OLT.