Re: Questions about OCSP

2005-11-29 Thread Stefan Vatev
Citation from "Dr. Stephen Henson" <[EMAIL PROTECTED]>: > On Mon, Nov 28, 2005, Stefan Vatev wrote: > > > > > Hi guys, > > I had to look in-depth the ocsp stuff of openssl and > some > > questions arise. Well, in ocsp.c I don't get why after > > trying OCSP_basic_verify(bs, verify_other, store, >

Re: Questions about OCSP

2005-11-28 Thread Dr. Stephen Henson
On Mon, Nov 28, 2005, Stefan Vatev wrote: > > Hi guys, > I had to look in-depth the ocsp stuff of openssl and some > questions arise. Well, in ocsp.c I don't get why after > trying OCSP_basic_verify(bs, verify_other, store, > verify_flags) and the result is negative openssl ties to > verify the s

Re: Questions about OCSP

2005-11-28 Thread Dr. Stephen Henson
On Mon, Nov 28, 2005, Stefan Vatev wrote: > > Another question bothering me what is written in the ocsp > documentation. This is done when all other verification > checks failed: > " > Otherwise the root CA of the OCSP responders CA is checked > to see if it is trusted for OCSP signing. If it is