API 文档#

OCSP 服务提供 NVIDIA 设备身份证书状态的实时验证。

OCSP 端点: https://ocsp.ndis.nvidia.com

可以使用 openssl 执行 OCSP 查询，如下所示

openssl ocsp -noverify -no_nonce -respout ocspresponse.resp -reqout ocsprequest.req -issuer nvidiacertchain.pem -cert nvidiacert.pem -url "https://ocsp.ndis.nvidia.com" -text

OCSP 证书状态 API 请求和响应需要以下详细信息

OCSP 请求包含以下数据

  • 协议版本

  • 服务请求

  • 目标证书标识符

  • 可选扩展，OCSP 响应者可以处理这些扩展

    • nonce

OCSP 响应包含以下数据

  • 响应语法版本

  • 响应者的标识符

  • 生成响应的时间

  • 请求中每个证书的响应

  • 可选扩展

  • 签名算法 OID

  • 跨响应哈希计算的签名

请求中每个证书的响应包括

  • 目标证书标识符

  • 证书状态值

  • 响应有效期

  • 可选扩展

此规范定义了以下明确的响应指示符，用于证书状态值中

  • 良好

  • 已吊销

  • 未知

示例输出

OCSP Request Data:
    Version: 1 (0x0)
    Requestor List:
        Certificate ID:
          Hash Algorithm: sha1
          Issuer Name Hash: 27C00D8DAB68F465BD71258DADD158A30B5C99F0
          Issuer Key Hash: 2D3E1FE02672EE00BFA96C52AE5E6314C1A1FE1C
          Serial Number: 860BEA704EB340D4
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 9C88E9C064BB5DE772D4D9C494E5F760BE5E1DA0
    Produced At: Sep 11 05:56:09 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 27C00D8DAB68F465BD71258DADD158A30B5C99F0
      Issuer Key Hash: 2D3E1FE02672EE00BFA96C52AE5E6314C1A1FE1C
      Serial Number: 860BEA704EB340D4
    Cert Status: good
    This Update: Sep 11 05:56:09 2024 GMT
    Next Update: Sep 12 05:56:09 2024 GMT

    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:2b:6b:cf:67:cc:50:b1:9e:2e:79:fd:d2:3c:f7:
        87:57:33:85:b3:ea:f6:f6:20:e6:f3:63:c9:29:c7:3f:3b:98:
        cc:47:19:82:f1:41:a7:08:68:ff:37:26:e7:d0:ef:b7:02:31:
        00:ff:dd:28:b3:c2:6a:10:4a:1f:92:9d:b7:84:8f:af:71:e2:
        12:59:a5:6e:2b:d3:bf:44:cc:56:44:a2:65:42:89:28:95:96:
        89:cf:44:46:c9:a7:52:ea:19:84:38:62:19
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c3:eb:f6:54:20:22:fd:ec:45:12:f2:4b:a5:03:a3:dd
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: CN=NVIDIA Reference Value L3 GH100 002, O=NVIDIA Corporation, C=US
        Validity
            Not Before: Oct 31 00:00:00 2023 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=NVIDIA OCSP Responder L3 GH100 002, O=NVIDIA Corporation, C=US
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub:
                    04:a2:cd:f3:76:5f:a2:51:f4:e2:0e:74:47:81:9a:
                    71:3f:85:e8:96:ba:02:4a:a5:a4:8e:90:4c:fc:45:
                    40:75:e1:d3:c9:48:89:bf:c4:d7:8c:b5:1d:9f:39:
                    d2:93:4d:56:12:75:0d:d7:5f:e6:0e:4b:59:21:05:
                    41:69:e7:ec:7a:8b:4d:eb:eb:df:6f:fd:31:f4:4e:
                    22:1e:3e:ab:17:67:e0:24:de:c7:9f:17:5e:60:f9:
                    0a:3b:ad:1f:2e:cb:75
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                OCSP Signing
            OCSP No Check:

            X509v3 Subject Key Identifier:
                9C:88:E9:C0:64:BB:5D:E7:72:D4:D9:C4:94:E5:F7:60:BE:5E:1D:A0
            X509v3 Authority Key Identifier:
                2D:3E:1F:E0:26:72:EE:00:BF:A9:6C:52:AE:5E:63:14:C1:A1:FE:1C
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:31:00:ca:ba:4a:4f:17:33:c2:dc:2c:5d:2c:84:c0:
        a5:55:29:8e:0f:c0:84:a7:2c:6d:ef:00:3a:a0:43:44:a1:dc:
        ed:74:87:e3:68:80:83:f3:f5:bd:d4:e7:6e:e4:8e:fe:41:02:
        30:0c:db:61:a7:c4:85:c7:f3:cc:76:3d:34:79:b1:70:89:1f:
        a8:c7:e5:d0:36:af:94:34:98:dd:1a:d2:48:e0:52:65:49:37:
        05:f6:66:44:5a:95:d8:c8:71:0f:8b:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
nvidiacert.txt: good
	This Update: Sep 11 05:56:09 2024 GMT
	Next Update: Sep 12 05:56:09 2024 GMT

最终用户许可协议#

通过使用 Attestation Suite 服务，您确认您已阅读本协议并同意其条款。如果您没有进入本协议的必要授权，或者如果您不接受所有协议条款和条件，请勿使用 Attestation Suite 服务。请参阅最终用户许可协议，了解有关数据收集的更多信息。

在本页中