35
muokkausta
Muutokset
Siirry navigaatioon
Siirry hakuun
case "AID=`openssl x509 -in certs/cert$OCSP" innum.pem -text -noout | fgrep -C 1 'X509v3 Authority Key Identifier' | tail -1 | sed 's/ //g; s/keyid://g'` *vrkcqc2) issuer="" for i in certs/vrkcqc2v*.pem do SID=`openssl x509 -in $i -text -noout | fgrep -C 1 'X509v3 Subject Key Identifier' | tail -1 | sed 's/ //g;s/keyid://g'` if [ "x$SID" = "x$AID" ];then issuer=$i break *vrkcqc3) fi done if [ "x$issuer" =certs/vrkcqc3.pem ;"x" ];then *) echo "Unknown Error Could not find issuerfor the certificate, exiting"; exit 1; esacfi
OCSP
,ei muokkausyhteenvetoa
SUBJECT=`openssl x509 -in certs/cert$num.pem -text -noout | fgrep Subject: | sed 's/.*Subject:://g'`
OCSP=`openssl x509 -in certs/cert$num.pem -text -noout | fgrep OCSP | sed 's/.*URI://g'`
echo Subject: $SUBJECT
echo OCPS link: $OCSP
echo Issuer: $issuer
openssl ocsp -CApath certs -issuer "$issuer" -cert certs/cert$num.pem -url $OCSP
done
<pre>
./check-ocsp.sh
Fetching http://proxy.fineid.fi/ca/vrkrootc.crt
Converting it to pem, and making CApath directory link
Subject: Subject: C = FI, serialNumber = 14683812B, GN = TERO, SN = KIVINEN, CN = KIVINEN TERO 14683812B
OCPS link: http://ocsp.fineid.fi/vrkcqc2
Issuer: certs/vrkcqc2.pem
Response verify OK
certs/cert1.pem: good
This Update: Mar 7 169 14:2024:08 17 2021 GMT Next Update: Mar 8 009 22:2024:08 17 2021 GMT
Subject: Subject: C = FI, serialNumber = 13991724X, GN = TERO, SN = KIVINEN, CN = KIVINEN TERO 13991724X
OCPS link: http://ocsp.fineid.fi/vrkcqc3
Issuer: certs/vrkcqc3.pem
Response verify OK
certs/cert2.pem: good
This Update: Mar 7 169 14:3133:58 44 2021 GMT Next Update: Mar 8 009 22:3133:58 44 2021 GMT
Subject: Subject: C = FI, serialNumber = 133366417, GN = TERO, SN = KIVINEN, CN = KIVINEN TERO 133366417
OCPS link: http://ocsp.fineid.fi/vrkcqc3
Issuer: certs/vrkcqc3.pem
Response verify OK
certs/cert3.pem: good
This Update: Mar 7 169 14:3133:58 44 2021 GMT Next Update: Mar 8 009 22:3133:58 44 2021 GMT
</pre>
