3.10.45. EAPTLS_OCSPCheck Previous topic Parent topic Child topic Next topic

This optional flag parameter is alternative to EAPTLS_OCSPAsyncCheck. This defines if Online Certificate Status must be checked for revoked certificates. It is used only with TLS-based EAP types, such as TLS, TTLS, and PEAP, that are configured to check client certificates. Using this parameter requires LWP::UserAgent and HTTP::Request Perl modules.
Here are the requirements for using OCSP parameters:
  • OpenSSL 1.0.0 or later
  • Net::SSLeay 1.59 or later. Net::SSLeay 1.82 or later is recommended.
    If you use EAPTLS_OCSPStapling, Net::SSLeay 1.82 or later is required.