I still don't get it. I used Wireshark and found out that the certificate sent
to the OCSP-responder is the CA-cert, not the client-cert to be validated! I am
clueless.
Online Certificate Status Protocol
tbsRequest
requestList: 1 item
Request
reqCert
On Tue, Aug 17, 2010 at 12:47:26PM +0200, Ulf Wahlqvist wrote:
I still don't get it. I used Wireshark and found out that the
certificate sent to the OCSP-responder is the CA-cert, not the
client-cert to be validated! I am clueless.
The code tries to verify each cert in the client cert chain