The following procedure for installing SMP3 with an Oracle DB is for Linux. For tests, you can use Oracle Express. Check your environment/company if you can use that version. Prerequisites Ensure that Oracle XE is up and running. It is important that the tnslistener is working! Run the listener and Read more…
Online Certificate Status Protocol, or short: OCSP, let you obtain the revocation status of a certificate. It has some benefits over certification revocation lists, mainly that you can let the OCSP server do the heavy work of validating a certificate and the client gets some additional security when accepting the Read more…
To test if OCSP is working, you need to have a certificate with OCSP information included. This is only available for certificates emitted AFTER the service was installed, configured and activated on the CA. Therefore, you`ll need to first create a new certificate for your tests. Depending on your CA Read more…
After having OCSP installed, configured and having CA include OCSP information in newly emitted certificates, the basic configuration is done and you are ready to use OCSP in your environment. To make better use of OCSP, some additional configuration steps should be done, like enabling NONCE. Microsoft test client isn`t Read more…
After having the OCSP service installed and configured, the CA must be made aware of the service. Only after this, new emitted certificates by the CA will include the OCSP information. This means that you can run a OCSP service without having it included in the client certificates. In that Read more…
I will really miss the “old” SAP Notes search available on support.sap.com. Eventually. There are several reasons, like: the new Fiori type replacement looks to be made primarily to be Fiori and not to offer easy usage to its users. Or: it`s slower, first versions contained only a fraction of Read more…
For the CA to be able to use OCSP, read permission to the private key must be given. Add Read permissions to Network Service on the private key Open the Certificate Templates snap-in. Select the OCSP Response Signing template. Right-click it and click on properties. Go to tab security. Click Read more…
After installing OCSP component in Windows, it is time to configure the service: how OCSP requests are going to be handled; from where to receive the CRL, specify OCSP certificate, etc. Open the Online Responder snap-in. Click on Revocation Configuration. The list of available configuration is empty. Add a new Read more…
Installing OCSP Responder Role You can install the OCSP responder role in Windows Server 2008 R2 either via a command line tool or by using the role wizard. Command line Command: servermanagercmd.exe –install ADCS-Online-Cert Whooops, deprecated 😀 Nevertheless, works. You just have to wait for the installer to finish. Role Read more…
I was preparing a demo showing how to visualize data from an IoT service using SAP UI5 VisFrame charts. To play around with VizFrame, I used the sample from SAPUI5 SDK. It was working perfectly on the online version, but while running the UI5 app and Chrome, I got an Read more…