RE: OCSP-validation fails - Wrong cert passed to OCSP by Apache

2010-08-18 Thread Ulf Wahlqvist
any errors I have made. /ulfW -Original Message- From: Joe Orton [mailto:jor...@redhat.com] Sent: den 17 augusti 2010 16:01 To: Ulf Wahlqvist Cc: modssl-users@modssl.org Subject: Re: OCSP-validation fails - Wrong cert passed to OCSP by Apache On Tue, Aug 17, 2010 at 12:47:26PM +0200

RE: OCSP-validation fails - Wrong cert passed to OCSP by Apache

2010-08-17 Thread Ulf Wahlqvist
I still don't get it. I used Wireshark and found out that the certificate sent to the OCSP-responder is the CA-cert, not the client-cert to be validated! I am clueless. Online Certificate Status Protocol tbsRequest requestList: 1 item Request reqCert

Re: OCSP-validation fails - Wrong cert passed to OCSP by Apache

2010-08-17 Thread Joe Orton
On Tue, Aug 17, 2010 at 12:47:26PM +0200, Ulf Wahlqvist wrote: I still don't get it. I used Wireshark and found out that the certificate sent to the OCSP-responder is the CA-cert, not the client-cert to be validated! I am clueless. The code tries to verify each cert in the client cert chain