Hi Ulf:
My guess is that this isn't an OpenSSL issue, but rather an issue with how the
Apache devels have implemented OCSP, so the best mailing list to ask about
these kinds of questions is probably the Apache-devel list.
Have fun.
Patrick.
On July 30, 2010 09:49:10 am Ulf Wahlqvist wrote:
>
I'm trying to get Apache to do Client certificate verification with
OCSP-validation.
It works without OCSP, but OCSP-validation fails when I turn it on.
The error is "OCSP_check_validity:status too old", but that doesn't make sense
because the clocks are within 2 seconds.
I have verified that if