API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 4806
[ACTIVE]

Online Certificate Status Protocol (OCSP) Extensions to IKEv2

Metadata

Publisher
IETF
Doc Type
Standard
Pages
11
Abstract
While the Internet Key Exchange Protocol version 2 (IKEv2) supports public key based authentication, the corresponding use of in-band Certificate Revocation Lists (CRL) is problematic due to unbounded CRL size. The size of an Online Certificate Status Protocol (OCSP) response is however well-bounded and small. This document defines the "OCSP Content" extension to IKEv2. A CERTREQ payload with "OCSP Content" identifies zero or more trusted OCSP responders and is a request for inclusion of an OCSP response in the IKEv2 handshake. A cooperative recipient of such a request responds with a CERT payload containing the appropriate OCSP response. This content is recognizable via the same "OCSP Content" identifier. When certificates are used with IKEv2, the communicating peers need a mechanism to determine the revocation status of the peer's certificate. OCSP is one such mechanism. This document applies when OCSP is desired and security policy prevents one of the IKEv2 peers from accessing the relevant OCSP responder directly. Firewalls are often deployed in a manner that prevents such access by IKEv2 peers outside of an enterprise network. [STANDARDS-TRACK]
Publication Date
2007-02-01
Status Note
Proposed Standard
DOI
10.17487/RFC4806
Link
https://doi.org/10.17487/RFC4806
Author(s)
Michael Myers
Hannes Tschofenig
Keyword(s)
IKEv2
Latest version of IETF RFC 4806

Document Versions — IETF RFC 4806

  • ▶ IETF RFC 4806 (2007-02-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4806.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 4806, Online Certificate Status Protocol (OCSP) Extensions to IKEv2. Available at https://doi.org/10.17487/RFC4806
Snippet:
IETF RFC 4806, Online Certificate Status Protocol (OCSP) Extensions to IKEv2. Available at https://doi.org/10.17487/RFC4806

HTML (ISO 690 compliant)

Preview:
IETF RFC 4806, Online Certificate Status Protocol (OCSP) Extensions to IKEv2. Available at https://doi.org/10.17487/RFC4806
Snippet:
<span class="citation"><cite>IETF RFC 4806</cite>, Online Certificate Status Protocol (OCSP) Extensions to IKEv2. Available at <a href="https://doi.org/10.17487/RFC4806" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4806</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 4806, Online Certificate Status Protocol (OCSP) Extensions to IKEv2
doi: 10.17487/RFC4806
url: https://doi.org/10.17487/RFC4806
Snippet:
<li>
<cite id="bib-rfc4806">IETF RFC 4806</cite>, Online Certificate Status Protocol (OCSP) Extensions to IKEv2
<span class="doi">10.17487/RFC4806</span>
</li>

Referenced By