Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add -passin to ocsp responder #13

Open
kaysond opened this issue Nov 15, 2021 · 0 comments
Open

Add -passin to ocsp responder #13

kaysond opened this issue Nov 15, 2021 · 0 comments

Comments

@kaysond
Copy link
Owner

kaysond commented Nov 15, 2021

spki/spki

Lines 638 to 649 in 789136a

#PASS=$(get-password 'intermediate OCSP private key' -noverify)
fi
# exec 3<<<"$PASS"
# openssl ocsp does not yet support the -passin arg
# see: https://github.com/openssl/openssl/issues/10682
openssl ocsp -port "$1" -text \
-index "$INDEX" \
-CA "$CA" \
-rkey "$RKEY" \
-rsigner "$RCERT" || {
echoc 'Could not start OCSP responder' red >&2
return 1

is addressed by
openssl/openssl#10718
which has been merged in openssl 3.0

this should be updated but it will break usage on older versions. we either have to wait until openssl3.0 is widely used or check for the version and branch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant