35
muokkausta
Muutokset
Siirry navigaatioon
Siirry hakuun
case AID=`openssl x509 -in certs/cert$num.pem -text -noout | fgrep -C 1 'X509v3 Authority Key Identifier' | tail -1 | sed 's/ //g; s/keyid://g'` issuer="" for i in certs/v*.pem do SID=`openssl x509 -in $i -text -noout | fgrep -C 1 'X509v3 Subject Key Identifier' | tail -1 | sed 's/ //g; s/keyid://g'` if [ "x$SID" = "x$AID" ]; then issuer=$i break fi done if [ "x$issuer" = "x" ]; then echo "Error Could not find issuer for the certificate, exiting" exit 1 fi if [ "x$OCSP" in= "x" ]; then echo "No OCSP link, trying to guess from issuer" *vrkcqc2) case "$issuer=" in certs/vrkcqc2.pem ) OCSP=http://ocsp.fineid.fi/vrkcqc2 ;; * certs/vrkcqc3.pem) issuerOCSP=certshttp://ocsp.fineid.fi/vrkcqc3.pem ;; *) echo "Unknown Issuer $issuernot kwown"; exit 1; esac esacfi
OCSP
,ei muokkausyhteenvetoa
SUBJECT=`openssl x509 -in certs/cert$num.pem -text -noout | fgrep Subject: | sed 's/.*Subject:://g'`
OCSP=`openssl x509 -in certs/cert$num.pem -text -noout | fgrep OCSP | sed 's/.*URI://g'`
echo Subject: $SUBJECT
echo OCPS link: $OCSP
echo Issuer: $issuer
openssl ocsp -CApath certs -issuer "$issuer" -cert certs/cert$num.pem -url $OCSP
done
<pre>
./check-ocsp.sh
Fetching http://proxy.fineid.fi/ca/vrkrootc.crt
Converting it to pem, and making CApath directory link
Subject: Subject: C = FI, serialNumber = 14683812B, GN = TERO, SN = KIVINEN, CN = KIVINEN TERO 14683812B
OCPS link: http://ocsp.fineid.fi/vrkcqc2
Issuer: certs/vrkcqc2.pem
Response verify OK
certs/cert1.pem: good
This Update: Mar 7 169 14:2024:08 17 2021 GMT Next Update: Mar 8 009 22:2024:08 17 2021 GMT
Subject: Subject: C = FI, serialNumber = 13991724X, GN = TERO, SN = KIVINEN, CN = KIVINEN TERO 13991724X
OCPS link: http://ocsp.fineid.fi/vrkcqc3
Issuer: certs/vrkcqc3.pem
Response verify OK
certs/cert2.pem: good
This Update: Mar 7 169 14:3133:58 44 2021 GMT Next Update: Mar 8 009 22:3133:58 44 2021 GMT
Subject: Subject: C = FI, serialNumber = 133366417, GN = TERO, SN = KIVINEN, CN = KIVINEN TERO 133366417
OCPS link: http://ocsp.fineid.fi/vrkcqc3
Issuer: certs/vrkcqc3.pem
Response verify OK
certs/cert3.pem: good
This Update: Mar 7 169 14:3133:58 44 2021 GMT Next Update: Mar 8 009 22:3133:58 44 2021 GMT
</pre>
