Ryan
Ryan

Reputation: 155

openssl ocsp request serial

Given this openssl ocsp request from openssl

openssl ocsp -index demoCA/index.txt -rsigner rcert.pem -CA demoCA/cacert.pem
 -issuer demoCA/cacert.pem -serial 1

what is the meaning of -serial parameter?

Upvotes: 1

Views: 1288

Answers (1)

Yuvika
Yuvika

Reputation: 6132

As per https://www.ietf.org/rfc/rfc2560.txt the OCSP request needs to contain the serial number of the certificate whose status is being checked. This can be provided to openssl using the serial option or using the cert option in which case the serial number is extracted from the certificate provided.

Upvotes: 2

Related Questions