gabrielcalegari / ocspresponder

A .NET facility to create an OCSP Responder. Written in C# under netstandard it has support for .NET Full and .NET Core

OCSPResponder

A .NET facility to create an OCSP Responder

What is this?

OCSPResponder is a library written in C# that enables you to easily create an OCSP Responder in .NET. All you need is to implement an interface for the CA/Authorized Responder. It follows the OCSP protocol defined in RFC 6960.

How do I use it?

.NET Core

0. Install OCSPResponder.AspNetCore via NuGet. This package contains OCSPResponder.Core as dependency.
1. Implement the IOcspResponderRepository interface for your CA.
2. Configure in your Dependency Injector to use the class OcspResponder for the interface IOcspResponder.
3. Configure in your Dependency Injector to use the class that you implemented for the interface IOcspResponderRepository.
4. Create a WebAPI Controller and call OcspResponder.Respond() passing the HttpRequest.ToOcspRequest().
5. Done! You've been configured your OCSP Responder.

Example

/Controllers/OcspController.cs

[Route("api/ocsp")]
public class OcspController : Controller
{
    [HttpGet]
    public async Task<IActionResult> Get(string encoded)
    {
        var ocspHttpRequest = await Request.ToOcspHttpRequest();
        var ocspHttpResponse =  await OcspResponder.Respond(ocspHttpRequest);
        return new OcspActionResult(ocspHttpResponse);
    }

    [HttpPost]
    public async Task<IActionResult> Post()
    {
        var ocspHttpRequest = await Request.ToOcspHttpRequest();
        var ocspHttpResponse = await OcspResponder.Respond(ocspHttpRequest);
        return new OcspActionResult(ocspHttpResponse);
    }

    private IOcspResponder OcspResponder { get; }

    public OcspController(IOcspResponder ocspResponder)
    {
        OcspResponder = ocspResponder;
    }
}

.NET Framework

0. Install OCSPResponder.Core via NuGet.
1. Implement the IOcspResponderRepository interface for your CA.
2. Configure in your Dependency Injector to use the class OcspResponder for the interface IOcspResponder.
3. Configure in your Dependency Injector to use the class that you implemented for the interface IOcspResponderRepository.
4. Create a WebAPI Controller and call OcspResponder.Respond() passing the HttpRequestMessage.ToOcspHttpRequest().
5. Done! You've been configured your OCSP Responder.

Example

/Controllers/OcspController.cs

[RoutePrefix("api/ocsp")]
public class OcspController : Controller
{
    [Route("{encoded}"]
    public Task<HttpResponseMessage> Get(string encoded)
    {
        var ocspHttpResponse = await OcspResponder.Respond(Request.ToOcspHttpRequest());
        return ocspHttpResponse.toHttpResponseMessage();
    }
    
    [Route("")]
    public Task<HttpResponseMessage> Post()
    {
        var ocspHttpResponse = await OcspResponder.Respond(Request.ToOcspHttpRequest());
        return ocspHttpResponse.toHttpResponseMessage();
    }
    
    private IOcspResponder OcspResponder { get; }
    
    public OcspController(IOcspResponder ocspResponder)
    {
        OcspResponder = ocspResponder;
    }
}

License

Code by Gabriel Calegari. Copyright 2018 Gabriel Calegari.

This library is intended to be used in both open-source and commercial environments. It is under Apache 2.0 license.

Refer to the LICENSE for detailed information.

Any questions, comments or additions?

If you have a feature request or bug report, leave an issue on the issues page or send a pull request. For general questions and comments, use the StackOverflow forum.

ocspresponder's Issues

How are SerialNumber Values Derived

Hello All,

I'm trying to figure how the SerialExists & SerialIsRevoked method derive the 'serial' argument value. So for example, when my certificate has a hexadecimal serial number value of '9dd919ba4ead18b78df7382112f9fb6953da22c5', I get the value of '901153053931671044175307656606196330260573332165' for the 'serial' argument.

Also, is there a reason why the value had to be altered? Can I configure the product to return just the hexadecimal value instead of these large numbers?

• Rashad Rivera

Example

Do you can give an example?