OCSP Success even cert alredy expired

2010-10-04 Thread shizumi
Hi all, i using openssl test tool by using this command openssl.exe ocsp -issuer "issuer.pem" -CAfile "CACert.pem" -cert "Certificate.pem" -url http://192.168.0.235:8080/myCA/publicweb/status/ocsp my CACert and issuer cert already expired. but it still return me "respond verify OK". i see in

Re: (Help) Verification using OCSP

2010-09-30 Thread shizumi
i solved the problem. it should add SSL_library_init(); in the begining of the code. thank you Dr. Stephen Henson wrote: > > On Wed, Sep 29, 2010, shizumi wrote: > >> >> Hi all, >> >> i try to do the ocsp verification in my application by using &g

(Help) Verification using OCSP

2010-09-29 Thread shizumi
Hi all, i try to do the ocsp verification in my application by using openssl-0.9.8o, but when call OCSP_basic_verify, it always return me -1. i test to print the error message. and it show me this line 4616:error:0D0C50A1:lib(13):func(197):reason(161):.\crypto\asn1\a_verify.c:146: 4616:error:270