OK, the previous answer was pretty fast - thank you.
Now there´s another stupid question: why does the command
openssl ocsp -respin ocsp.resp -CAfile CAs.pem
lead to
Response Verify Failure 19961:error:27069070:OCSP routines:OCSP_basic_verify:root ca not trusted:ocsp_vfy.c:148:
though the correct root ca cert (CN=6R-Ca 1:PN) is contained in CAs.pem ?
The cert seems to be valid and the chain seems to be complete. What´s wrong?
Again, the file (this time ocsp.resp) is contained in the following base64-block -------------------------------------------------------------------------------- MIIG4QoBAKCCBtowggbWBgkrBgEFBQcwAQEEggbHMIIGwzCCATuhgYEwfzELMAkG A1UEBhMCREUxHDAaBgNVBAoUE0RldXRzY2hlIFRlbGVrb20gQUcxHzAdBgNVBAsU FlByb2R1a3R6ZW50cnVtIFRlbGVTZWMxMTAMBgcCggYBCgcUEwExMCEGA1UEAxQa VGVsZVNlYyBQS1MgU2lnRyBESVIgMjk6UE4YDzIwMDQwNjIyMDkyMzU3WjCBozCB oDA9MAkGBSsOAwIaBQAEFEYVRei2XiQgH+6qvRyBvvarzxqCBBQMmgzhg7+7+YBo G0Ifr7LFRSj/MAIEL62IToAAGA8yMDA0MDYyMjA5MjM1N1qhTDBKMBoGBSskCAMM BBEYDzIwMDMwNzI4MTUzNDU3WjAsBgUrJAgDDQQjMCEwCQYFKw4DAhoFAAQUb+qB 0hgaeFO1joALJOdZasdM19kwDQYJKoZIhvcNAQEFBQADgYEAdzL3St/c4Z+70yqn BPgFYKy7sGez+PKB2viy6ZtS5kZvoE6CJVnyyk6BHLlE8EoP7Cu8Zl67BHxPbAAj 3NXO/EgPZMZqwEVMju5JMBpDYE28+1s78D3PO5iSJJn5AXIKoTNkrhsvGZa/pOkC +BHsVauaGyHKyLWL+t9fNPf56H+gggTtMIIE6TCCAnkwggHloAMCAQICBAHlZ1kw CgYGKyQDAwECBQAwbzELMAkGA1UEBhMCREUxPTA7BgNVBAoUNFJlZ3VsaWVydW5n c2JlaMhvcmRlIGbIdXIgVGVsZWtvbW11bmlrYXRpb24gdW5kIFBvc3QxITAMBgcC ggYBCgcUEwExMBEGA1UEAxQKNlItQ2EgMTpQTjAiGA8yMDAzMDYzMDA5NTQzMFoY DzIwMDcwNjMwMDk1NDMwWjB/MQswCQYDVQQGEwJERTEcMBoGA1UEChQTRGV1dHNj aGUgVGVsZWtvbSBBRzEfMB0GA1UECxQWUHJvZHVrdHplbnRydW0gVGVsZVNlYzEx MAwGBwKCBgEKBxQTATEwIQYDVQQDFBpUZWxlU2VjIFBLUyBTaWdHIERJUiAyOTpQ TjCBoTANBgkqhkiG9w0BAQEFAAOBjwAwgYsCgYEAiq3HkxUwn7blTpZonuLR4j0h ertCeWBSVhnArFgbxaQij0I9402I7z3pOfjbS9YQcrpEC48psgjq0tTRStOGtaDh iKM5bwA6wl741OGR8yanm9YcGnm6hqHtUv0HIQoYmQxszm5mqUNaHdVKfwaz6s1p JK1I2Fwmvn77OX5NH18CBQDAAAABoxIwEDAOBgNVHQ8BAf8EBAMCAQIwCgYGKyQD AwECBQADgYEAA2UJLezrN0h/iaa2fgGDQRu2tIl/EhYfBnwQQTzBJRw6GzyiGAXz 5EhmiPl13cbOrpHcU/Y5itQY9W53DEby1yqdSHAB0eGaFx4Qv9pOj0CTT76cNxWJ p0zAIyQG1fDMvFp8MkQDwXnFWcHhYy1UpLK66IScJdikZe++8pl03ccwggJoMIIB 1KADAgECAgMy0Y0wCgYGKyQDAwECBQAwbzELMAkGA1UEBhMCREUxPTA7BgNVBAoU NFJlZ3VsaWVydW5nc2JlaMhvcmRlIGbIdXIgVGVsZWtvbW11bmlrYXRpb24gdW5k IFBvc3QxITAMBgcCggYBCgcUEwExMBEGA1UEAxQKNlItQ2EgMTpQTjAiGA8yMDAx MDIwMTA5NTIxN1oYDzIwMDUwNjAxMDk1MjE3WjBvMQswCQYDVQQGEwJERTE9MDsG A1UEChQ0UmVndWxpZXJ1bmdzYmVoyG9yZGUgZsh1ciBUZWxla29tbXVuaWthdGlv biB1bmQgUG9zdDEhMAwGBwKCBgEKBxQTATEwEQYDVQQDFAo2Ui1DYSAxOlBOMIGh MA0GCSqGSIb3DQEBAQUAA4GPADCBiwKBgQCDoqsVJM1cqp77YYoZ5bbBOZtV5+U2 Snkf9jED0rXOYSfleMqbRLSMfhZ+azqKk+VRFVoXBN+cHWz74CckBZ+ZrJoT0E/+ l0hjpa1kaBbpplzfZUMwIwo9bIE3JqCwlUObOVqQgDlxcFVrteqp3c97DyLZ94yd Bdyod8O/TYJbzwIFAMAAAAGjEjAQMA4GA1UdDwEB/wQEAwIBBjAKBgYrJAMDAQIF AAOBgQA6SqRTB1pMK3zBwksDbMu47AvkAMcxYuG/qCvnMQX5VyQDqp4hUtV/x7t9 iVGbNB37k4lwaCUJAksZP5mmUjcyOet3imWShM0pXiI7MFy8kPsri2dc++z3AIVw LtBTs8u9zUUOwCWvt7jDJ59lEMv7Buo18jtBlNIXW5st30DN5A== --------------------------------------------------------------------------------
thanks in advance again -- Christian Weber mailto:[EMAIL PROTECTED] Tel: 02361/91300 For information on InfoTech visit http://www.InfoTech.de/
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
