CODEWITHSUNDEEP
pkiocspejbca
Maxwell Chandler
Maxwell Chandler

Reputation: 642

Verify ocsp response is signed by different key than Issuing CA

Given I have the issuing CAs pem, how would I verify the ocsp response from openssl ocsp is signed by a different key than the one binded to the CA? I am trying to make sure I set up my ocsp responder in EJBCA correctly.

Upvotes: -2

Views: 101

Answers (1)

primetomas
primetomas

Reputation: 552

You should print the request and response, then you can see in the response what certificates are used to sign it. This is done with the -req_text and -resp_text options, i.e. openssl ocsp -req_text -resp_text

Upvotes: 1

Related Questions