aboutsummaryrefslogtreecommitdiffstats
path: root/demos/certs/ocspquery.sh
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2012-09-09 20:43:49 +0000
committerDr. Stephen Henson <steve@openssl.org>2012-09-09 20:43:49 +0000
commit79b184fb4b65d501352a189ff102b509e14e62ca (patch)
tree4f110bea0a58cc24eb2aafab06d3278fb0d87e41 /demos/certs/ocspquery.sh
parent648f551a4aa1da792620cdbbddb791dba28fb297 (diff)
downloadopenssl-79b184fb4b65d501352a189ff102b509e14e62ca.tar.gz
Extend certificate creation examples to include CRL generation and sample
scripts running the test OCSP responder.
Diffstat (limited to 'demos/certs/ocspquery.sh')
-rw-r--r--demos/certs/ocspquery.sh21
1 files changed, 21 insertions, 0 deletions
diff --git a/demos/certs/ocspquery.sh b/demos/certs/ocspquery.sh
new file mode 100644
index 0000000000..f664113305
--- /dev/null
+++ b/demos/certs/ocspquery.sh
@@ -0,0 +1,21 @@
+# Example querying OpenSSL test responder. Assumes ocsprun.sh has been
+# called.
+
+OPENSSL=../../apps/openssl
+OPENSSL_CONF=../../apps/openssl.cnf
+export OPENSSL_CONF
+
+# Send responder queries for each certificate.
+
+echo "Requesting OCSP status for each certificate"
+$OPENSSL ocsp -issuer intca.pem -cert client.pem -CAfile root.pem \
+ -url http://127.0.0.1:8888/
+$OPENSSL ocsp -issuer intca.pem -cert server.pem -CAfile root.pem \
+ -url http://127.0.0.1:8888/
+$OPENSSL ocsp -issuer intca.pem -cert rev.pem -CAfile root.pem \
+ -url http://127.0.0.1:8888/
+# One query for all three certificates.
+echo "Requesting OCSP status for three certificates in one request"
+$OPENSSL ocsp -issuer intca.pem \
+ -cert client.pem -cert server.pem -cert rev.pem \
+ -CAfile root.pem -url http://127.0.0.1:8888/