{
  "id": "ocsp",
  "title": "rladmin cluster ocsp",
  "url": "https://redis.io/docs/latest/operate/rs/7.8/references/cli-utilities/rladmin/cluster/ocsp/",
  "summary": "Manages OCSP.",
  "content": "\nManages OCSP configuration and verifies the status of a server certificate maintained by a third-party [certificate authority (CA)](https://en.wikipedia.org/wiki/Certificate_authority).\n\n## `ocsp certificate_compatible`\n\nChecks if the proxy certificate contains an OCSP URI.\n\n```sh\nrladmin cluster ocsp certificate_compatible\n```\n\n### Parameters\n\nNone\n\n### Returns\n\nReturns the OCSP URI if it exists. Otherwise, it returns an error.\n\n### Example\n\n```sh\n$ rladmin cluster ocsp certificate_compatible\nSuccess. OCSP URI is http://responder.ocsp.url.com\n```\n\n## `ocsp config`\n\nDisplays or updates OCSP configuration. Run the command without the `set` option to display the current configuration of a parameter.\n\n```sh\nrladmin cluster ocsp config \u003cOCSP parameter\u003e\n        [set \u003cvalue\u003e]\n```\n\n### Parameters\n\n| Parameter | Type/Value | Description |\n|-----------|---------------|-------------|\n| ocsp_functionality | enabled\u003cbr\u003e\u003c/br\u003edisabled | Enables or turns off OCSP for the cluster |\n| query_frequency | integer \u003cnobr\u003e(range: 60-86400)\u003c/nobr\u003e \u003cnobr\u003e(default: 3600)\u003c/nobr\u003e | The time interval in seconds between OCSP queries to check the certificate's status |\n| recovery_frequency | integer \u003cnobr\u003e(range: 60-86400)\u003c/nobr\u003e \u003cnobr\u003e(default: 60)\u003c/nobr\u003e | The time interval in seconds between retries after a failed query |\n| recovery_max_tries | integer \u003cnobr\u003e(range: 1-100)\u003c/nobr\u003e \u003cnobr\u003e(default: 5)\u003c/nobr\u003e | The number of retries before the validation query fails and invalidates the certificate |\n| responder_url | string | The OCSP server URL embedded in the proxy certificate (you cannot manually set this parameter) |\n| response_timeout | integer \u003cnobr\u003e(range: 1-60)\u003c/nobr\u003e \u003cnobr\u003e(default: 1)\u003c/nobr\u003e | The time interval in seconds to wait for a response before timing out |\n\n### Returns\n\nIf you run the `ocsp config` command without the `set` option, it displays the specified parameter's current configuration.\n\n### Example\n\n```sh\n$ rladmin cluster ocsp config recovery_frequency\nRecovery frequency of the OCSP server is 60 seconds\n$ rladmin cluster ocsp config recovery_frequency set 30\n$ rladmin cluster ocsp config recovery_frequency\nRecovery frequency of the OCSP server is 30 seconds\n```\n\n## `ocsp status`\n\nReturns the latest cached status of the certificate's OCSP response.\n\n```sh\nrladmin cluster ocsp status\n```\n### Parameters\n\nNone\n\n### Returns\n\nReturns the latest cached status of the certificate's OCSP response.\n\n### Example\n\n```sh\n$ rladmin cluster ocsp status\nOCSP certificate status is: REVOKED\nproduced_at: Wed, 22 Dec 2021 12:50:11 GMT\nresponder_url: http://responder.ocsp.url.com\nrevocation_time: Wed, 22 Dec 2021 12:50:04 GMT\nthis_update: Wed, 22 Dec 2021 12:50:11 GMT\n```\n\n## `ocsp test_certificate`\n\nQueries the OCSP server for the certificate's latest status, then caches and displays the response.\n\n```sh\nrladmin cluster ocsp test_certificate\n```\n\n### Parameters\n\nNone\n\n### Returns\n\nReturns the latest status of the certificate's OCSP response.\n\n### Example\n\n```sh\n$ rladmin cluster ocsp test_certificate\nInitiating a query to OCSP server\n...OCSP certificate status is: REVOKED\nproduced_at: Wed, 22 Dec 2021 12:50:11 GMT\nresponder_url: http://responder.ocsp.url.com\nrevocation_time: Wed, 22 Dec 2021 12:50:04 GMT\nthis_update: Wed, 22 Dec 2021 12:50:11 GMT\n```\n",
  "tags": ["docs","operate","rs"],
  "last_updated": "2026-04-01T08:10:08-05:00"
}