wdawson / revoker Goto Github PK

First off, thanks for the excellent app. I'm pretty new to certificates, OCSP and so on, which is why I chose this implementation for testing purposes. I do have a suggestion for the introduction README:

When I started working with the OCSP Responder, I specified the needed files and ports within the .yml-config. I worked with a full test set of certificates, including three parties requiring OCSP. For each one, I specified the URL to the OCSP service within the respective X509v3 extension fields. Following the instructions on the README, I specified each field as http://localhost:10123, for example. Upon placing my OCSP requests to this URL, I kept on getting the following response every time:

{"code":404,"message":"HTTP 404 Not Found"}

After some hours of head scratching, I found out from your source code, that OCSP requests are supposed to be sent to a domain formatted like this: http://localhost:10123/ocsp. Thankfully, this allowed the actual requests to be made to your app and communicated back to my validator.

It'd be great if the domain formatting could be made clearer in the README.