Re: [openssl-users] Problems verifying OCSP signatures

2015-01-03 Thread Richard Moore
I've now got this working, though to do so I seem to have to take the certificates supplied in the OCSP response directly out of the certs field of the OCSP_BASICRESP and add these as intermediates for the verification too. It feels bad to directly access the internals of this struct but there

Re: [openssl-users] Problems verifying OCSP signatures

2015-01-03 Thread Walter H.
On 03.01.2015 18:16, Richard Moore wrote: I've now got this working, though to do so I seem to have to take the certificates supplied in the OCSP response directly out of the certs field of the OCSP_BASICRESP and add these as intermediates for the verification too. It feels bad to directly

Re: [openssl-users] Problems verifying OCSP signatures

2015-01-03 Thread Richard Moore
On 3 January 2015 at 21:45, Walter H. walte...@mathemainzel.info wrote: On 03.01.2015 18:16, Richard Moore wrote: I've now got this working, though to do so I seem to have to take the certificates supplied in the OCSP response directly out of the certs field of the OCSP_BASICRESP and add

[openssl-users] Problems verifying OCSP signatures

2014-12-28 Thread Richard Moore
Hi All, I'm trying to get some code to verify the signature of an OCSP response to work properly and I'm hitting quite a few road blocks. I've also been talking to the curl developers who are having the same problems and I wondered if anyone can help us. I've tried 3 different ways of handling