So, can anyone else who has had experience in
creating OCSP request let me know where I am missing.
=== Creating CA certificate for OCSP test
===
# openssl req -new -x509 -out cacert.pem -keyout
cakey.pem -nodes -days 365 -subj
/C=US/ST=California/L=Cupertino/O=ocsptest/CN=ca
=== Creating CA management directories
===
# cp cakey.pem
demoCA/private/cakey.pem
# name=`$SSLDIR/bin/openssl x509 -hash -in
cacert.pem -noout`
# cp cacert.pem demoCA/certs/${name}.0
=== Creating certificate request for Person
===
# openssl req -new -out person.csr -keyout
personkey.pem -nodes -subj
/C=US/ST=California/L=Cupertino/O=ocsptest/CN=Person
=== Signing certificate request for Person
===
#openssl ca -in person.csr -out person.pem -days
365 -batch
=== Verifying certificate ===
# openssl verify -CApath demoCA/certs -verbose
person.pem
OCSP REQUEST failes here:
=== Creating ocsp request, writing to req.der ===
# openssl ocsp -issuer cacert.pem -cert person.pem -reqout req.der
Memory fault(coredump)
#
=== Printing out ocsp request in text format ===
# openssl ocsp -reqin req.der -text
OCSP Request Data:
Version: 1
(0x0)
Requestor
List:
Certificate
ID:
Hash Algorithm:
sha1
Issuer Name
Hash:
8478FB3511666E8D6B180DCAADDDB000F87515F5
Issuer Key Hash:
3D3E04FFD9B18F8A069B8840177362024B371A46
Serial Number: 01
Request
Extensions:
OCSP
Nonce:
0410702968692F5B429EE6E03885472D8C6C
Memory
fault(coredump)
#
=== Writing ocsp response in text format ===
# openssl ocsp -CA cacert.pem -CApath demoCA/certs -respin resp.der
-text
.......
.......
-----END CERTIFICATE-----
Response verify OK
Memory
fault(coredump)
#
