Re: [us...@httpd] OCSP-validation fails

2010-08-18 Thread Joe Orton
On Tue, Aug 17, 2010 at 05:26:22PM +0200, Ulf Wahlqvist wrote: > CASE 1/ If I set: > SSLOCSPDefaultResponder http://ocsp.trust.telia.com > SSLOCSPOverrideResponder on > > The validation will fail with "SSL Library Error: error:2707307F:OCSP > routines:OCSP_check_validity:status too old" Presumin

[us...@httpd] OCSP-validation fails

2010-08-17 Thread Ulf Wahlqvist
An incomplete version of this post has previously been posted in openssl-us...@openssl.org and modssl-us...@modssl.org, but this post contains a lot more info. I didn't realize that the appropriate list is users@httpd.apache.org I'm trying to get Apache to do Client certificate verification wit