Step 5 - Using the Service Manager
After finalizing the configuration changes within the OCSP Service, it must be restarted to make the changes effective. The OCSP Service Manager module allows operators to start, stop or restart service and also make changes to service related configurations. Also, it provides the operator to select either to run the OCSP Service in Service Mode or Gateway Mode from OCSP Service Mode section. By default, Enable Service Mode option is selected.
Clicking on the Service Manager link will show the following screen:
The configuration items are as follows:
| Item | Description |
| Service Address | The address of the OCSP Service being controlled from this Service Manager. Ensure the address points to the correct service URL, i.e. if you are running the service on multiple machines in a load-balanced configuration, then check that the name is correct for a particular instance that needs to be started/ stopped/ restarted. By default, it will be that of the local machine. |
| Start | Start the service. Status will change to “Running” after a successful start |
| Stop | Stop the service. Status will change to “Stopped” after the service is stopped. |
| Restart | Stop and then start the service in one go, Status will change to “Running” after a successful restart. |
| Log OCSP transactions | When the Log OCSP transactions option is enabled then all OCSP transactions are recorded in the ADSS Server database. With this option disabled no OCSP transactions will be recorded in the database. This feature is useful when much higher throughput is required and logging is seen as an overhead, e.g. within EV TLS environments. |
| OCSP Service Mode | This section defines the configuration required for the OCSP service to entertain request's directly or behaving as a proxy server for backend OCSP service. |
| Enable Service Mode |
When this option is enabled, the OCSP Service handles all the requests and responds accordingly.
Note: Service Mode is enabled by default.
|
| Enable Gateway Mode | If enabled, this OCSP Service instance will act as gateway instance for backend OCSP Server. OCSP Service verifies the request structure and validates the Client. Upon success, it relays the received request to the back-end OCSP Server using the provided configurations defined below. |
| OCSP Service Address | Use this field to add back-end OCSP Service Address(es). |
| List of OCSP Service Addresses | This field shows the OCSP Service Address(es) that can be used to forward requests to the back-end OCSP Server. Multiple services addresses can be added. The Test button checks if the service is available whereas the Remove button deletes a configured service address. |
Ensure all the changes are saved by clicking the Save button and restart the service to take changes effect.
See also