Re: Is it me or is ocsp.comodoca.com doing something wrong?

2013-06-13 Thread Ryan Hurst
CA delegated. Ryan Hurst Chief Technology Officer GMO Globalsign twitter: @rmhrisk email: ryan.hu...@globalsign.com phone: 206-650-7926 Sent from my phone, please forgive the brevity. On Jun 13, 2013, at 3:42 AM, Igor Sverkos wrote: > Hi, > > Ryan Hurst wrote: >> They are doing a CA signed O

Re: Is it me or is ocsp.comodoca.com doing something wrong?

2013-06-13 Thread Igor Sverkos
Hi, forget it - I got it :) "-VAfile level1.crt" is doing 'the trick'. But I still don't now how to compute/get the responseID on my own. Thanks. -- Regards, Igor __ OpenSSL Project http://www

Re: Is it me or is ocsp.comodoca.com doing something wrong?

2013-06-13 Thread Igor Sverkos
Hi, Ryan Hurst wrote: > They are doing a CA signed OCSP response, this is legitimate. > > We will do this in the not so distant future as well for many of our > responses also. If this is called "CA signed OCSP response", how is *your* current response, which you will change in future, called?

RE: Is it me or is ocsp.comodoca.com doing something wrong?

2013-06-12 Thread Ryan Hurst
t key material to do the validation. Ryan -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Igor Sverkos Sent: Wednesday, June 12, 2013 4:41 PM To: openssl-users@openssl.org Subject: Is it me or is ocsp.comodoca.com doing something wrong

Is it me or is ocsp.comodoca.com doing something wrong?

2013-06-12 Thread Igor Sverkos
Hi, I tried to validate a certificate from Comodo using their OCSP, but I cannot verify the response: 3073455752:error:27069076:OCSP routines:OCSP_basic_verify:signer certificate not found:ocsp_vfy.c:85: The certificate I want to validate was issued by C=GB, ST=Greater Manchester, L=Salford,