Skip to content

Conversation

@anhu
Copy link
Member

@anhu anhu commented Dec 17, 2025

No description provided.

@anhu
Copy link
Member Author

anhu commented Dec 17, 2025

This did not lean heavily on AI. It started the example, but I basically re-wrote the whole thing.

From the wolfSSL library source code directory:

```bash
openssl ocsp -port 22221 -ndays 365 \
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

~/GitHub/wolfssl-examples$ openssl ocsp -port 22221 -ndays 365       -index certs/ocsp/index-intermediate1-ca-issued-certs.txt       -rsigner certs/ocsp/ocsp-responder-cert.pem       -rkey certs/ocsp/ocsp-responder-key.pem       -CA certs/ocsp/intermediate1-ca-cert.pem
ACCEPT 0.0.0.0:22221 PID=2110825
Could not open file or uri for loading responder certificate from certs/ocsp/ocsp-responder-cert.pem
40E7847007740000:error:16000069:STORE routines:ossl_store_get0_loader_int:unregistered scheme:../crypto/store/store_register.c:237:scheme=file
40E7847007740000:error:80000002:system library:file_open:No such file or directory:../providers/implementations/storemgmt/file_store.c:267:calling stat(certs/ocsp/ocsp-responder-cert.pem)
Unable to load responder certificate
Error loading responder certificate

~/GitHub/wolfssl-examples$ find . -name intermediate1-ca-cert.pem
./ocsp/stapling/client-certs/intermediate1-ca-cert.pem

This is in a few places

$ ./certverify_ocsp
Loaded root CA: ../../wolfssl/certs/ocsp/root-ca-cert.pem
Loaded intermediate CA: ../../wolfssl/certs/ocsp/intermediate1-ca-cert.pem
OCSP checking enabled
Verifying certificate: ../../wolfssl/certs/ocsp/server1-cert.pem
Certificate chain verification: PASSED
Performing OCSP check...
OCSP check failed (-407): Invalid OCSP Status Error

OCSP lookup failed!
Make sure the OCSP responder is running:
  cd <wolfssl-dir>
  openssl ocsp -port 22221 -ndays 365 \
      -index certs/ocsp/index-intermediate1-ca-issued-certs.txt \
      -rsigner certs/ocsp/ocsp-responder-cert.pem \
      -rkey certs/ocsp/ocsp-responder-key.pem \
      -CA certs/ocsp/intermediate1-ca-cert.pem

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants