From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 2 Jan 2018 15:06:54 +0000 (-0500)
Subject: remove OCSP for now.
X-Git-Tag: release_3_0_16~14
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ece19e47f526eb8d00a8eaff47778601ed7e22d1;p=thirdparty%2Ffreeradius-server.git

remove OCSP for now.
---

diff --git a/doc/ChangeLog b/doc/ChangeLog
index a162312f570..e42bbc2b2f7 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -36,8 +36,7 @@ FreeRADIUS 3.0.16 Mon 17 Jul 2017 09:00:00 EDT urgency=high
 	* dictionary.patton updates from Brice Schaffner.  Fixes #2137.
 	* Added scripts to build "inner-server.pem", and updated
 	  mods-config/inner-eap and certs/README to match.
-	* Added provisions for OCSP certs. See raddb/certs/
-	* Added provisiokns for using an external CA.  See raddb/certs/
+	* Added provisions for using an external CA.  See raddb/certs/
 
 	Bug fixes
 	* Bind the lifetime of program name and python path to the module
diff --git a/raddb/certs/Makefile b/raddb/certs/Makefile
index ac64564cd68..16447a023d2 100644
--- a/raddb/certs/Makefile
+++ b/raddb/certs/Makefile
@@ -28,7 +28,7 @@ include passwords.mk
 #
 ######################################################################
 .PHONY: all
-all: index.txt serial dh server ca client ocsp
+all: index.txt serial dh server ca client
 
 .PHONY: client
 client: client.pem
@@ -39,9 +39,6 @@ ca: ca.der
 .PHONY: server
 server: server.pem server.vrfy
 
-.PHONY: ocsp
-ocsp: ocsp.pem ocsp.vrfy
-
 .PHONY: inner-server
 inner-server: inner-server.pem inner-server.vrfy
 
@@ -103,28 +100,6 @@ server.pem: server.p12
 server.vrfy: ca.pem
 	@$(OPENSSL) verify $(PARTIAL) -CAfile ca.pem server.pem
 
-
-######################################################################
-#
-#  Create a new ocsp certificate, signed by the above CA.
-#
-######################################################################
-ocsp.csr ocsp.key: ocsp.cnf
-	$(OPENSSL) req -new  -out ocsp.csr -keyout ocsp.key -config ./ocsp.cnf
-
-ocsp.crt: ocsp.csr ca.key ca.pem
-	$(OPENSSL) ca -batch -keyfile ca.key -cert ca.pem -in ocsp.csr -key $(PASSWORD_CA) -out ocsp.crt -config ./ocsp.cnf
-
-ocsp.p12: ocsp.crt
-	$(OPENSSL) pkcs12 -export -in ocsp.crt -inkey ocsp.key -out ocsp.p12  -passin pass:$(PASSWORD_OCSP) -passout pass:$(PASSWORD_OCSP)
-
-ocsp.pem: ocsp.p12
-	$(OPENSSL) pkcs12 -in ocsp.p12 -out ocsp.pem -passin pass:$(PASSWORD_OCSP) -passout pass:$(PASSWORD_OCSP)
-
-.PHONY: ocsp.vrfy
-ocsp.vrfy: ca.pem
-	@$(OPENSSL) verify $(PARTIAL) -CAfile ca.pem ocsp.pem
-
 ######################################################################
 #
 #  Create a new client certificate, signed by the the above server