Ability to Disable Online Certificate Status Protocol (OCSP) for Transport Layer Security (TLS) Connections to Remote Syslog Servers

To comply with RFC 6960 (X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP), ExtremeXOS 30.7 provides the ability to disable Online Certificate Status Protocol (OCSP) check for Transport Layer Security (TLS) connections to remote Syslog servers.
Note

Note

Be sure you understand the ramifications of turning off OCSP if you chose to do so.

Supported Platforms

ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, and X870 series switches.

New CLI Commands

configure syslog tls ocsp [on | off]

Changed CLI Commands

The following show commands now displays the OCSP check status.

show log configuration