Nationwide PKI Testing - Ensuring Interoperability of OCSP Server and Client Implementations Early During Component Tests

Abstract

Interoperability issues between different implementations in large-scale systems is one of the major reasons for increased effort during system test. This paper addresses this problem in the context of the Online Certificate Status Protocol (OCSP) in a Public Key Infrastructure (PKI), which is part of the certificate verification process of many components. The high interconnection of OCSP clients and server increases the complexity of system tests to ensure interoperation. This paper pro- vides a component based testing method for clients and servers using OCSP exemplified by testing PKI components of a nationwide IT infrastructure. The method ensures high interoperability requirements of large-scale infrastructures during component tests and reduces efforts for test execution.

Publication
Talk: Sixth European Workshop on Public Key Services, Applications and Infrastructures, Pisa, Italy; 09-10-2009 - 09-11-2009; in: “Proceedings of the Sixth European Workshop on Public Key Services, Applications and Infrastructures”, Springer, (2009), 115 - 130
Thomas Grechenig
Thomas Grechenig
Ao.Univ.Prof. Dipl.-Ing. Dr.techn.