Re: OpenSSL OCSP Responder used in a CGI Skript - I found the bug

2012-12-14 Thread Walter H.
Salz, Rich wrote: neither >/dev/null nor 2>&1 >file nor 2>&1 >/dev/null, let this line "disappear" Redirections happen left-to-right. So do this: >/dev/null 2>&1 left-to-right? outer-to-inner, I understand; Or the simpler 2>/dev/nul ok Thanks, Walter

Re: OpenSSL OCSP Responder used in a CGI Skript - I found the bug

2012-12-14 Thread Walter H.
Dr. Stephen Henson wrote: On Wed, Dec 12, 2012, Walter H. wrote: Hello, when using openssl ocsp ... in a CGI skript, you must use -noverify because without, this creates the line Response verify OK neither >/dev/null nor 2>&1 >file nor 2>&1 >/dev/null, let this line "disappear" so this

RE: OpenSSL OCSP Responder used in a CGI Skript - I found the bug

2012-12-12 Thread Salz, Rich
> neither >/dev/null nor 2>&1 >file nor 2>&1 >/dev/null, let this line > "disappear" Redirections happen left-to-right. So do this: >/dev/null 2>&1 Or the simpler 2>/dev/null -- Principal Security Engineer Akamai Technology Cambridge, MA ___

Re: OpenSSL OCSP Responder used in a CGI Skript - I found the bug

2012-12-12 Thread Dr. Stephen Henson
On Wed, Dec 12, 2012, Walter H. wrote: > Hello, > > when using > > openssl ocsp ... > > in a CGI skript, you must use -noverify > because without, this creates the line > > Response verify OK > > neither >/dev/null nor 2>&1 >file nor 2>&1 >/dev/null, let this line > "disappear" > > so this s

OpenSSL OCSP Responder used in a CGI Skript - I found the bug

2012-12-12 Thread Walter H.
Hello, when using openssl ocsp ... in a CGI skript, you must use -noverify because without, this creates the line Response verify OK neither >/dev/null nor 2>&1 >file nor 2>&1 >/dev/null, let this line "disappear" so this shoots either a 500 page or an invalid OCSP response is sent, which

Re: OpenSSL OCSP Responder used in a CGI Skript

2012-12-11 Thread Dr. Stephen Henson
On Mon, Dec 10, 2012, Walter H. wrote: > Hello, > > I have created a self signed root CA certificate, and two other CA > certificate, that I signed with this self signed root certificate; > and these SubCA certificates are used for signing requests; > > with the root CA I signed also a certifica

OpenSSL OCSP Responder used in a CGI Skript

2012-12-11 Thread Walter H.
Hello, I have created a self signed root CA certificate, and two other CA certificate, that I signed with this self signed root certificate; and these SubCA certificates are used for signing requests; with the root CA I signed also a certificate, with the purpose of signing OCSP Responder; us