http - I Cannot Find a Simple Proxy Server that Supports my OCSP/CRL requirements

Question

My requirements are as follows:

1. Take in an HTTP request and generate an HTTPS request to an upstream server
2. Check the revocation status of the upstream server certificate with an overridden OCSP url
3. If the OCSP responder is unavailable, check the revocation status against a CRL
4. Cache all of the OCSP responses for future use so you do not need to reach out to the responder every time

I have been searching and searching and I cannot find anything that supports this. Does anyone know of anything that does? Or know how I could go about implementing my own proxy server to support this?

Answer 1

等待大神答复