(An Untitled Masterwork)
ActivePublic
Actions

Authored by dcaro on Jan 3 2021, 3:19 PM.

Tags

None

Referenced Files

	F33983705: raw-paste-data.txt
	Jan 3 2021, 3:19 PM

Subscribers

None

	## New ocsp
	dcaro@seaborgium:~$ sudo openssl ocsp -issuer /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.chain.crt -cert /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.crt -text -url http://r3.o.lencr.org
	OCSP Request Data:
	Version: 1 (0x0)
	Requestor List:
	Certificate ID:
	Hash Algorithm: sha1
	Issuer Name Hash: 7EE66AE7729AB3FCF8A220646C16A12D6071085D
	Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1
	Serial Number: 0495779809842A31E50D10A2FE348383DE74
	Request Extensions:
	OCSP Nonce:
	0410156EAE16EF233BD5BC02252817FE2043
	Responder Error: unauthorized (6)

	## old ocsp
	dcaro@seaborgium:~$ sudo openssl ocsp -issuer /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.chain.crt -cert /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.crt -text -url http://ocsp.int-x3.letsencrypt.org
	OCSP Request Data:
	Version: 1 (0x0)
	Requestor List:
	Certificate ID:
	Hash Algorithm: sha1
	Issuer Name Hash: 7EE66AE7729AB3FCF8A220646C16A12D6071085D
	Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1
	Serial Number: 0495779809842A31E50D10A2FE348383DE74
	Request Extensions:
	OCSP Nonce:
	04105D4C2FA84AC51F1CAFA56D740040E649
	OCSP Response Data:
	OCSP Response Status: successful (0x0)
	Response Type: Basic OCSP Response
	Version: 1 (0x0)
	Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
	Produced At: Jan 3 14:01:00 2021 GMT
	Responses:
	Certificate ID:
	Hash Algorithm: sha1
	Issuer Name Hash: 7EE66AE7729AB3FCF8A220646C16A12D6071085D
	Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1
	Serial Number: 0495779809842A31E50D10A2FE348383DE74
	Cert Status: good
	This Update: Jan 3 14:00:00 2021 GMT
	Next Update: Jan 10 14:00:00 2021 GMT

	Signature Algorithm: sha256WithRSAEncryption
	87:24:76:b8:9f:da:1a:7a:d7:cc:dd:0a:ea:ff:77:e2:88:95:
	fc:52:68:12:bb:92:7e:32:6e:95:bf:fc:de:93:ab:e0:7c:9f:
	5d:d5:75:b1:77:a6:d8:4d:8e:6b:ee:42:d8:3f:e9:8e:0c:e8:
	4b:16:61:48:82:0c:e4:b3:1f:1a:1a:ba:46:2f:5f:a1:d7:41:
	54:6c:b0:0d:4c:58:e9:78:b7:43:f1:4e:28:97:82:6d:cd:7c:
	cc:09:f0:81:49:20:44:94:7e:6a:dc:f0:43:32:c6:1b:e7:3a:
	c8:e8:83:86:ec:3e:04:d1:0c:1e:44:1e:0f:e8:94:e2:26:d9:
	ac:eb:dc:0a:64:4f:bb:fd:48:6e:1b:43:dd:eb:18:84:35:20:
	f0:d2:00:5d:11:85:1d:33:ae:d0:fb:95:a6:5f:64:9e:c1:de:
	38:12:e5:da:d2:5e:f1:04:4a:96:a6:f9:08:3c:69:10:3b:1d:
	f8:9a:83:c0:45:33:d7:11:40:7a:30:f6:5c:e5:b6:18:04:6d:
	17:bb:d4:96:23:2d:1b:15:68:40:51:2a:23:c6:c5:ed:00:ae:
	60:cb:50:8e:83:d5:8a:46:76:4e:87:10:c7:93:f1:f0:ca:7f:
	51:55:42:d7:48:56:7e:d7:d7:81:35:fa:4d:bb:be:35:b1:55:
	1e:c9:73:4a
	WARNING: no nonce in response
	Response verify OK
	/etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.crt: good
	This Update: Jan 3 14:00:00 2021 GMT
	Next Update: Jan 10 14:00:00 2021 GMT

Event Timeline

dcaro created this paste.Jan 3 2021, 3:19 PM

dcaro mentioned this in T271063: acme-chief ldap certs required chained (with intermediate CA) versions suddenly.Jan 3 2021, 3:41 PM

(An Untitled Masterwork)ActivePublicActions

Event Timeline

(An Untitled Masterwork)
ActivePublic
Actions