Unreachable OCSR Configuration
The following sample configuration implements DISA/DoD-compliant client behavior in the event of an unreachable OCSR.
ACMEPACKET# configure terminal ACMEPACKET(configure)# security# ACMEPACKET(security)# tls-profile ACMEPACKET(security)# show tls-profile name DoD end-entity-certificate sylarCert-2048 trusted-ca-certificates dod1 dod2 disaA disaB IBM1 cipher-list all verify-depth 10 mutual-authenticate disabled tls-version tlsv1 cert-status-check enabled cert-status-profile-list DoD ignore-dead-responder enabled ... ... ACMEPACKET(tls-profile)#