On Thu, Jul 18, 2013, redpath wrote: > > I then run this command > > *openssl ocsp -issuer ./demoCA/cacert.pem -serial 0x1000 -text * > OCSP Request Data: > Version: 1 (0x0) > Requestor List: > Certificate ID: > Hash Algorithm: sha1 > Issuer Name Hash: *D56D19422F523984CFB9477E7D39A8176AE3811C* > Issuer Key Hash: 83551DA56838E8893B6BCDD70865A9F23167F4E0 > Serial Number: *1000* > Request Extensions: > OCSP Nonce: > 04107A6A2A916348D63165C7C18889AC06CC >
If you include the -url option it should query the responder. You should then get the expected response. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org