getting both OCSP Response Status: successful and an Response Verify Failure error ?

2010-03-24 Thread PGNet Dev
testing an ocsp query to a local openssl ocsp 'server', openssl ocsp \ -issuer /svr/demoCA/certs/CA/CA.cert.pem \ -cert /svr/demoCA/certs/domains/testdomain.cert.pem \ -url http://localhost: \ -resp_text i get what seems to be a successful response of good CertStatus, OCSP Response

Re: getting both OCSP Response Status: successful and an Response Verify Failure error ?

2010-03-24 Thread Dr. Stephen Henson
On Tue, Mar 23, 2010, PGNet Dev wrote: testing an ocsp query to a local openssl ocsp 'server', openssl ocsp \ -issuer /svr/demoCA/certs/CA/CA.cert.pem \ -cert /svr/demoCA/certs/domains/testdomain.cert.pem \ -url http://localhost: \ -resp_text i get what seems to be a successful

Re: getting both OCSP Response Status: successful and an Response Verify Failure error ?

2010-03-24 Thread PGNet Dev
On Wed, Mar 24, 2010 at 4:46 AM, Dr. Stephen Henson st...@openssl.org wrote: The path of the responder certificate has to be validated so you need to pass the root CA using the -CAfile or -CApath command line arguments. adding -CAfile did the trick -- adding it to BOTH the server-launch cmd,