Re: [openssl-users] Problems verifying OCSP signatures

2015-01-03 Thread Richard Moore
On 3 January 2015 at 21:45, Walter H. wrote: > On 03.01.2015 18:16, Richard Moore wrote: > > I've now got this working, though to do so I seem to have to take the > certificates supplied in the OCSP response directly out of the certs field > of the OCSP_BASICRESP and add these as intermediates f

Re: [openssl-users] Problems verifying OCSP signatures

2015-01-03 Thread Walter H.
On 03.01.2015 18:16, Richard Moore wrote: I've now got this working, though to do so I seem to have to take the certificates supplied in the OCSP response directly out of the certs field of the OCSP_BASICRESP and add these as intermediates for the verification too. It feels bad to directly acce

Re: [openssl-users] Problems verifying OCSP signatures

2015-01-03 Thread Richard Moore
I've now got this working, though to do so I seem to have to take the certificates supplied in the OCSP response directly out of the certs field of the OCSP_BASICRESP and add these as intermediates for the verification too. It feels bad to directly access the internals of this struct but there does