remove OCSP for now.

diff --git a/doc/ChangeLog b/doc/ChangeLog
index a162312f570a31a306042bedd049edb9da80985c..e42bbc2b2f7ac2f8c44c03d792a55df101dc0c1f 100644 (file)
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -36,8 +36,7 @@ FreeRADIUS 3.0.16 Mon 17 Jul 2017 09:00:00 EDT urgency=high
        * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
        * Added scripts to build "inner-server.pem", and updated
          mods-config/inner-eap and certs/README to match.
-       * Added provisions for OCSP certs. See raddb/certs/
-       * Added provisiokns for using an external CA.  See raddb/certs/
+       * Added provisions for using an external CA.  See raddb/certs/
 
        Bug fixes
        * Bind the lifetime of program name and python path to the module

diff --git a/raddb/certs/Makefile b/raddb/certs/Makefile
index ac64564cd680b980029414b84b52a238499eacb0..16447a023d2cdce2d16d39cf31bcde4dba600df5 100644 (file)
--- a/raddb/certs/Makefile
+++ b/raddb/certs/Makefile
@@ -28,7 +28,7 @@ include passwords.mk
 #
 ######################################################################
 .PHONY: all
-all: index.txt serial dh server ca client ocsp
+all: index.txt serial dh server ca client
 
 .PHONY: client
 client: client.pem
@@ -39,9 +39,6 @@ ca: ca.der
 .PHONY: server
 server: server.pem server.vrfy
 
-.PHONY: ocsp
-ocsp: ocsp.pem ocsp.vrfy
-
 .PHONY: inner-server
 inner-server: inner-server.pem inner-server.vrfy
 
@@ -103,28 +100,6 @@ server.pem: server.p12
 server.vrfy: ca.pem
        @$(OPENSSL) verify $(PARTIAL) -CAfile ca.pem server.pem
 
-
-######################################################################
-#
-#  Create a new ocsp certificate, signed by the above CA.
-#
-######################################################################
-ocsp.csr ocsp.key: ocsp.cnf
-       $(OPENSSL) req -new  -out ocsp.csr -keyout ocsp.key -config ./ocsp.cnf
-
-ocsp.crt: ocsp.csr ca.key ca.pem
-       $(OPENSSL) ca -batch -keyfile ca.key -cert ca.pem -in ocsp.csr -key $(PASSWORD_CA) -out ocsp.crt -config ./ocsp.cnf
-
-ocsp.p12: ocsp.crt
-       $(OPENSSL) pkcs12 -export -in ocsp.crt -inkey ocsp.key -out ocsp.p12  -passin pass:$(PASSWORD_OCSP) -passout pass:$(PASSWORD_OCSP)
-
-ocsp.pem: ocsp.p12
-       $(OPENSSL) pkcs12 -in ocsp.p12 -out ocsp.pem -passin pass:$(PASSWORD_OCSP) -passout pass:$(PASSWORD_OCSP)
-
-.PHONY: ocsp.vrfy
-ocsp.vrfy: ca.pem
-       @$(OPENSSL) verify $(PARTIAL) -CAfile ca.pem ocsp.pem
-
 ######################################################################
 #
 #  Create a new client certificate, signed by the the above server