OCSP Load Test Tool

Prerequisites: You must have a Java JRE or JDK 1.7 or 1.8 (32- or 64-bit) installed.

The OCSP Load Test Tool is a utility for load testing and comparing various OCSP solutions.

  1. From the Validation Responder disk image, copy the Tools/loadtest folder to your target system.

  2. Change directories to the local loadtest folder.

    To start the OCSP Load Test Tool, double-click the loadtest.jar file, or enter the command:

    Copy 
    java -jar loadtest.jar

    The HID Global OCSP Load Test Tool opens:

  3. Enter a Test Name and Description.

  4. Browse for the Issuer Cert.

  5. Browse to a certificate file that represents an issuer registered with the OCSP Responder you intend to test and click Open.

  6. To add the OCSP Responder URLs, click Add.

  7. Enter the URL of an OCSP Responder you want to use for this test, and click OK.

  8. To add test data, click either Add Cert, Add Certs By Directory, Add Serial, or Add Serials From File.

  1. Click Add Cert.

  2. Select the certificate to add and click OK.

  1. Click Add Certs By Directory.

  2. Select the directory that contains the certificates to add and click Open.

  3. When prompted, click OK.

  1. Click Add Serial.

  2. Enter the serial number of the certificate to add and click OK.

  1. Click Add Serials From File..

  2. Enter a text file that consists of a series of serial numbers separated by new lines and click Open.

  3. Click Next. Alternatively, click the Run Test tab.

  4. If desired, change the # Requests and # Threads to simulate more validation requests coming from each source and more than one source making requests respectively.

  5. If applicable, click the send nonce with each request check box.

  6. After you make changes applicable to your deployment, click Start Test.

  7. To stop the test, click Stop.

    The graph on the upper right side of the tab displays the number of OCSP validation requests serviced by the Validation Responder per second. This provides an indication of how many requests the Validation Responder is able to handle.

    The graph on the lower right side of the tab displays the average time per request, in milliseconds, that it took for the Validation Responder to handle each OCSP request. This provides an indication of how the Validation Responder handles heavier loads.

    When the test is finished, you will see something like the following:

    The results of the test are displayed in the Results box.

  8. To clear these results, click Clear Results.

    Alternatively, you can clear the information displayed in the graphs by clicking Clear Graphs.

    The graphs will alternate colors for subsequent tests. The following image displays the graphs from four subsequent tests.

    If you want to run another test with different parameters, then click the Setup Test tab and repeat the process.