On 03.01.2015 18:16, Richard Moore wrote:
I've now got this working, though to do so I seem to have to take the certificates supplied in the OCSP response directly out of the certs field of the OCSP_BASICRESP and add these as intermediates for the verification too. It feels bad to directly access the internals of this struct but there doesn't seem to be another way (unless someone can enlighten me).the certificate you want to test its validity with OCSP has the same intermediate CA cert. as the OCSP responder certificate you use in OCSP responseCheers Rich.
Walter
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ openssl-users mailing list openssl-users@openssl.org https://mta.opensslfoundation.net/mailman/listinfo/openssl-users