CAs with dual stacked CRL/OCSP servers

staticsafe me at staticsafe.ca
Sun Dec 7 22:47:30 UTC 2014


On 12/5/2014 07:06, Rob Seastrom wrote:
> 
> At $DAYJOB, we have some applications that we would like to be all
> hipster and *actually check* for certificate revocation.  I know this
> is way out there in terms of trendiness and may offend some folks.
> 
> Difficulty: the clients are running on single stacked IPv6.  We have
> recently been advised by our existing CA that they "do not currently
> have IPv6 support plan" (sic).
> 
> OCSP Stapling sounds like it could be a winner here.  Unfortunately,
> the software support is not quite ready yet on the platform on either
> end of the connection (client or server).
> 
> So...  we're looking around for a vendor that's taken the time to dual
> stack its servers.
> 
> Any leads?
> 
> -r
> 

GlobalSign does.

~# host ocsp2.globalsign.com
ocsp2.globalsign.com has address 108.162.232.200
ocsp2.globalsign.com has address 108.162.232.202
ocsp2.globalsign.com has address 108.162.232.207
ocsp2.globalsign.com has address 108.162.232.197
ocsp2.globalsign.com has address 108.162.232.198
ocsp2.globalsign.com has address 108.162.232.205
ocsp2.globalsign.com has address 108.162.232.203
ocsp2.globalsign.com has address 108.162.232.199
ocsp2.globalsign.com has address 108.162.232.196
ocsp2.globalsign.com has address 108.162.232.201
ocsp2.globalsign.com has address 108.162.232.204
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c7
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c6
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8cc
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8cd
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c5
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8ca
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c4
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8cf
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8cb
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c9
ocsp2.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c8

crl.globalsign.com has address 108.162.232.205
crl.globalsign.com has address 108.162.232.197
crl.globalsign.com has address 108.162.232.203
crl.globalsign.com has address 108.162.232.204
crl.globalsign.com has address 108.162.232.198
crl.globalsign.com has address 108.162.232.200
crl.globalsign.com has address 108.162.232.202
crl.globalsign.com has address 108.162.232.196
crl.globalsign.com has address 108.162.232.201
crl.globalsign.com has address 108.162.232.207
crl.globalsign.com has address 108.162.232.199
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8ca
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c8
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8cb
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8cf
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c4
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c6
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c9
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8cc
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8cd
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c5
crl.globalsign.com has IPv6 address 2400:cb00:2048:1::6ca2:e8c7



-- 
staticsafe
https://staticsafe.ca



More information about the NANOG mailing list