OCSP cache

Hi,

Is there a way to clear the OCSP cache? I'm using SecTrustEvaluateWithError with a custom revocation policy, only the first call sends an OCSP request, seems subsequent calls use the cache response, but for my testing it would be good if I can clear this cache.

Cheers, Jose

Is there a way to clear the OCSP cache?

There is no API to clear the OCSP cache. I tried forcing this by creating a policy with SecPolicyCreateRevocation and then deleting the app each time, but did not see consistent results there either. This would be an Enhancement Request.

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

Hi Matt,

Thanks for your answer, do you know if there is a separate utility or command that I can use to clear the OCSP cache? I'm testing with macOS Big Sur

OCSP cache
 
 
Q