Registry / auth-security / openssl-ocsp-responder

openssl-ocsp-responder

JSON →
library1.0.1pypypiunverified

Simple wrapper for OpenSSL OCSP server. Provides a command-line tool and library for running an OCSP responder using OpenSSL. Current version 1.0.1, last release Jan 2024. Low release cadence.

pip install openssl-ocsp-responder
INSTALL
IMPORT
SIG · OPENSSL-OCSP-RESPO
O
openssl-ocsp-responder
auth-securitypythonv1.0.1
Install
3.4s avg
Import
Disk
34MB
Pass rate
10/ 10
Env Coverage10 / 10
glibc
3.93.13
musl
3.93.13
Install & Compatibility
Where this runs
tested against v1.0.1 · pip install
no network on importno background threads
Install × environment matrix
Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux
musl
py 3.103.95 runs
installs and imports cleanly · install 0.0s · import 0.000s · 36.2MB
glibc
py 3.103.95 runs
installs and imports cleanly · install 3.4s · import 0.000s · 37MB
34MB installed
● package 34MB
Code
Verified usage

Verified import paths — ran on the pinned version, not inferred.

OCSPResponder
from openssl_ocsp_responder import OCSPResponder
from openssl_ocsp_responder import OCSPResponder

Basic usage of OCSPResponder class to start OCSP responder on port 8080.

from openssl_ocsp_responder import OCSPResponder responder = OCSPResponder( ca_cert='ca.pem', responder_cert='responder.crt', responder_key='responder.key', port=8080 ) responder.serve_forever()
openssl-ocsp-responder --version
Debug
Known issues
gotchaThe responder requires OpenSSL binary to be installed on the system and accessible via PATH. If not found, an exception will be raised.
fix
Install OpenSSL (e.g., via apt, brew, or choco) and ensure it's in PATH.
affects: all
gotchaThe library uses subprocess to call 'openssl ocsp' command. The responder's behavior depends on the OpenSSL version installed.
fix
Test with the same OpenSSL version as production.
affects: all
deprecatedThe function 'set_responder_cert' was deprecated in v1.0.0; use the constructor parameter instead.
fix
Pass responder_cert and responder_key directly to OCSPResponder.
affects: >=1.0.0
Upgrade
Version history
1.0.1latest on PyPI · released Dec 30, 2021
Audit
Dependencies
opensslrequiredRequires OpenSSL binary on system PATH
Agent activity
16 hits · last 30 days
node
14
Amazon
1
OpenAI (training)
1
Resources
openssl-ocsp-responder — pip install openssl-ocsp-responder · libregistry