Start of change

System SSL: OCSP support and CRL updates

Description: System SSL is enhanced to:
  • Support retrieval of certificate revocation lists (CRLs) through HTTP URLs specified in the certificate's CRL Distribution Points extension.
  • Have more flexible processing of CRLs from a LDAP directory.
  • Support retrieval of revocation information through the online certificate status protocol (OCSP). OCSP is defined in RFC 2560.

When change was introduced: z/OS® V2R2

Reference information:
Parent topic: Cryptographic Services new functions to consider
End of change