Additional properties are needed to control certain aspects of certificate revocation checking. In particular, we need a property that allows a customer to adjust the maximum allowable clock skew when validating signed OCSP (On-line Certificate Staus Protocol) responses. Also, we need a property that allows a customer to adjust the maximum connection timeout when downloading CRLs (Certificate Revocation Lists).
|