Nationwide PKI testing: ensuring interoperability of OCSP server and client implementations early during component tests

Authors:
Christian Schanes;Andreas Mauczka;Uwe Kirchengast;Thomas Grechenig;Sven Marx
Affiliations:
Vienna University of Technology, Industrial Software, Vienna, Austria;Vienna University of Technology, Industrial Software, Vienna, Austria;Vienna University of Technology, Industrial Software, Vienna, Austria;Vienna University of Technology, Industrial Software, Vienna, Austria;gematik, Berlin, Germany
Venue:
EuroPKI'09 Proceedings of the 6th European conference on Public key infrastructures, services and applications
Year:
2009

Citing 9
Cited 0

Evaluating certificate status information mechanisms

Proceedings of the 7th ACM conference on Computer and communications security
Digital certificates: a survey of revocation methods

MULTIMEDIA '00 Proceedings of the 2000 ACM workshops on Multimedia
Evaluation of Certificate Revocation Policies: OCSP vs. Overissued-CRL

DEXA '02 Proceedings of the 13th International Workshop on Database and Expert Systems Applications
On Certificate Revocation and Validation

FC '98 Proceedings of the Second International Conference on Financial Cryptography
A research agenda for distributed software development

Proceedings of the 28th international conference on Software engineering
Interoperability for electronic governance

Proceedings of the 1st international conference on Theory and practice of electronic governance
A generic formal framework for protocol interoperability test and test cases minimization

Proceedings of the 3rd international workshop on Automation of software test
Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities

EUROCRYPT '07 Proceedings of the 26th annual international conference on Advances in Cryptology
Interoperability test generation and minimization for communication protocols based on the multiple stimuli principle

IEEE Journal on Selected Areas in Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Interoperability issues between different implementations in large-scale systems is one of the major reasons for increased effort during system test. This paper addresses this problem in the context of the Online Certificate Status Protocol (OCSP) in a Public Key Infrastructure (PKI), which is part of the certificate verification process of many components. The high interconnection of OCSP clients and server increases the complexity of system tests to ensure interoperation. This paper provides a component based testing method for clients and servers using OCSP exemplified by testing PKI components of a nationwide IT infrastructure. The method ensures high interoperability requirements of large-scale infrastructures during component tests and reduces efforts for test execution.