]> git.ipfire.org Git - thirdparty/openvpn.git/commit
ocsp_check - double check if ocsp didn't report any errors in execution
authorHubert Kario <hkario@redhat.com>
Fri, 26 Sep 2014 10:24:01 +0000 (12:24 +0200)
committerGert Doering <gert@greenie.muc.de>
Mon, 6 Oct 2014 13:10:50 +0000 (15:10 +0200)
commit27ab61cec7cefa645a1e02834e032eef12907598
tree0f790d0d5eb0bcc88a4c2a1f3acf646a771d064b
parent99400ef8524a5565a40637c825f4dcde475c54dd
ocsp_check - double check if ocsp didn't report any errors in execution

in case the reposnses are too old, ocsp tool can return text like this:

Response verify OK
ca/cert.pem: WARNING: Status times invalid.
139990703290240:error:2707307D:OCSP routines:OCSP_check_validity:status
expired:ocsp_cl.c:358:
good
        This Update: Sep 21 12:12:48 2014 GMT
        Next Update: Sep 22 12:12:48 2014 GMT

light change in buffering can cause "verify OK" and "ca/cert.pem: good"
to be placed in a way that matching will be valid
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <1411727041-11884-2-git-send-email-hkario@redhat.com>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9055

Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit 51390f4de4f02edf377d55a7ef108798d2d8dc88)
contrib/OCSP_check/OCSP_check.sh