Hi,

when you set the "-host" parameter as last, you will get the following error:

 ~/cert-test/ $ openssl ocsp -CApath /etc/ssl/certs -no_nonce -issuer
issuer.crt -cert cert.crt -url http://ocsp2.globalsign.com/gsalphag2
-host ocsp2.globalsign.com

Error querying OCSP responsder
139638328587920:error:27076072:OCSP routines:PARSE_HTTP_LINE1:server
response error:ocsp_ht.c:250:Code=403,Reason=Forbidden
*** Error in `openssl': munmap_chunk(): invalid pointer: 0x00007fff0b82859d ***
======= Backtrace: =========
/lib64/libc.so.6(+0x741bf)[0x7f001440e1bf]
/lib64/libc.so.6(+0x79ace)[0x7f0014413ace]
/usr/lib64/libcrypto.so.1.0.0(CRYPTO_free+0x1d)[0x7f00148874cd]
openssl[0x45981b]
openssl[0x418e78]
openssl[0x418bc6]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7f00143bbb15]
openssl[0x418c4b]
======= Memory map: ========
00400000-00478000 r-xp 00000000 fe:03 303689
  /usr/bin/openssl
00678000-00679000 r--p 00078000 fe:03 303689
  /usr/bin/openssl
00679000-0067e000 rw-p 00079000 fe:03 303689
  /usr/bin/openssl
0067e000-0067f000 rw-p 00000000 00:00 0
025fb000-0263d000 rw-p 00000000 00:00 0                                  [heap]
7f0013d6a000-7f0013d7f000 r-xp 00000000 fe:03 192002
  /usr/lib64/gcc/x86_64-pc-linux-gnu/4.8.2/libgcc_s.so.1
7f0013d7f000-7f0013f7e000 ---p 00015000 fe:03 192002
  /usr/lib64/gcc/x86_64-pc-linux-gnu/4.8.2/libgcc_s.so.1
7f0013f7e000-7f0013f7f000 r--p 00014000 fe:03 192002
  /usr/lib64/gcc/x86_64-pc-linux-gnu/4.8.2/libgcc_s.so.1
7f0013f7f000-7f0013f80000 rw-p 00015000 fe:03 192002
  /usr/lib64/gcc/x86_64-pc-linux-gnu/4.8.2/libgcc_s.so.1
7f0013f80000-7f0013f95000 r-xp 00000000 fe:03 160220
  /lib64/libz.so.1.2.8
7f0013f95000-7f0014194000 ---p 00015000 fe:03 160220
  /lib64/libz.so.1.2.8
7f0014194000-7f0014195000 r--p 00014000 fe:03 160220
  /lib64/libz.so.1.2.8
7f0014195000-7f0014196000 rw-p 00015000 fe:03 160220
  /lib64/libz.so.1.2.8
7f0014196000-7f0014198000 r-xp 00000000 fe:03 667133
  /lib64/libdl-2.19.so
7f0014198000-7f0014398000 ---p 00002000 fe:03 667133
  /lib64/libdl-2.19.so
7f0014398000-7f0014399000 r--p 00002000 fe:03 667133
  /lib64/libdl-2.19.so
7f0014399000-7f001439a000 rw-p 00003000 fe:03 667133
  /lib64/libdl-2.19.so
7f001439a000-7f0014539000 r-xp 00000000 fe:03 667200
  /lib64/libc-2.19.so
7f0014539000-7f0014739000 ---p 0019f000 fe:03 667200
  /lib64/libc-2.19.so
7f0014739000-7f001473d000 r--p 0019f000 fe:03 667200
  /lib64/libc-2.19.so
7f001473d000-7f001473f000 rw-p 001a3000 fe:03 667200
  /lib64/libc-2.19.so
7f001473f000-7f0014743000 rw-p 00000000 00:00 0
7f0014743000-7f00148ea000 r-xp 00000000 fe:03 301863
  /usr/lib64/libcrypto.so.1.0.0
7f00148ea000-7f0014aea000 ---p 001a7000 fe:03 301863
  /usr/lib64/libcrypto.so.1.0.0
7f0014aea000-7f0014b04000 r--p 001a7000 fe:03 301863
  /usr/lib64/libcrypto.so.1.0.0
7f0014b04000-7f0014b0f000 rw-p 001c1000 fe:03 301863
  /usr/lib64/libcrypto.so.1.0.0
7f0014b0f000-7f0014b13000 rw-p 00000000 00:00 0
7f0014b13000-7f0014b72000 r-xp 00000000 fe:03 301866
  /usr/lib64/libssl.so.1.0.0
7f0014b72000-7f0014d72000 ---p 0005f000 fe:03 301866
  /usr/lib64/libssl.so.1.0.0
7f0014d72000-7f0014d76000 r--p 0005f000 fe:03 301866
  /usr/lib64/libssl.so.1.0.0
7f0014d76000-7f0014d7d000 rw-p 00063000 fe:03 301866
  /usr/lib64/libssl.so.1.0.0
7f0014d7d000-7f0014d9e000 r-xp 00000000 fe:03 666577
  /lib64/ld-2.19.so
7f0014f8e000-7f0014f92000 rw-p 00000000 00:00 0
7f0014f9b000-7f0014f9d000 rw-p 00000000 00:00 0
7f0014f9d000-7f0014f9e000 r--p 00020000 fe:03 666577
  /lib64/ld-2.19.so
7f0014f9e000-7f0014f9f000 rw-p 00021000 fe:03 666577
  /lib64/ld-2.19.so
7f0014f9f000-7f0014fa0000 rw-p 00000000 00:00 0
7fff0b808000-7fff0b829000 rw-p 00000000 00:00 0                          [stack]
7fff0b991000-7fff0b992000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0
  [vsyscall]
Aborted (core dumped)


 $ openssl version
OpenSSL 1.0.1g 7 Apr 2014

gcc-4.8.2, glibc-2.19


-- 
Regards,
Igor
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to