Moved to openssl-users:

Massimiliano Pala wrote:
> 
> Hi all,
> 
> I am trying to get the ocsp stuff working with the Netscape psm, I am only
> at the beginning, but I have some questions for you:
> 
>         o Is it the PEM_read_bio_OCSP_REQUEST() the right function
>           to use to read a DER encoded request ( from Netscape psm ) ?
>           If not, which is it and what parameters should be used for
>           that ?
> 

Since an OCSP a DER request is not PEM encoded, no it isn't the right
function.

>         o I have also tried the d2i_OCSP_REQUEST_bio, without success.
> 

Thats one of the functions you can use. However it depends on the
context in which you call it. If its from a CGI script you may be OK
because the OCSP request should be readable from standard input. If its
from a socket then you'll need to parse the HTTP POST and MIME headers
and extract the request which immediately follows them.

The 'ocsp' utility can be used for testing and it includes a primitive
responder though I haven't tried it with PSM.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to