Skip to Main Content

Java SE (Java Platform, Standard Edition)

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Java Certificate Revocation List / OCSP Performance Issues

Donald KelleyDec 23 2013 — edited Feb 27 2014

As the JRE environments and usage of applets has become more and more secure in through the evolution of enhancements to the JRE we have noticed a performance degradation in usage of these applets and launching of them.

As our customers are in the business to business environment they utilize our applets that are delivered from the server to the client.  We are looking at ways to reduce the time to validate that the certificates are still valid.  we are looking for ways to provide a means for our customers to validate against a CRL on our server or to cache the the checks against the OCSP so that not each and every client accessing our server needs to go out to the third party sites to get the checks completed.

Is there a means to store this information on our server and have the JRE validate against that system rather than the normal OSCP

Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Mar 27 2014
Added on Dec 23 2013
1 comment
1,770 views