Menu

Search

GlobalSCAPE Knowledge Base


Adjust for time drift (skew) between the CA and EFT for OCSP requests


kmarsh
EFT Express (SMB) & Enterprise

THE INFORMATION IN THIS ARTICLE APPLIES TO:

  • EFT v7.3.6 and later

DISCUSSION

The CA response for OCSP requests is timestamped and therefore could cause problems with out-of-sync clocks. This setting allows you to adjust for time drift (skew) between the CA and EFT. The default is 300 seconds (5 minutes).

(Best practice recommendation is to ensure that all servers are automatically updating their clocks periodically, e.g. with their domain controller or some atomic clock somewhere.)

HKEY_LOCAL_MACHINE\Software\Wow6432Node\GlobalSCAPE Inc.\EFT Server 7.3\

Name: OCSPStaplingResponseTimeSkewSec

Type: DWORD

Default Value:300

Minimum Value: 0

Maximum Value: 4294967295

Cached: yes

Backup/Restore: yes


Also In This Category


On a scale of 1-5, please rate the helpfulness of this article


Not Helpful
Very Helpful
Optionally provide private feedback to help us improve this article...

Thank you for your feedback!


Comments require login or registration.

Details
Last Modified: 2 Years Ago
Last Modified By: kmarsh
Type: HOWTO
Rated 2 stars based on 1 vote
Article has been viewed 2.6K times.
Options
Find Similar