Hi,
i use openssl to verify the OCSP response, i think i get a positive (good) repsone however i receive follow error during the response:
140131535607456:error:27069076:OCSP routines:OCSP_basic_verify:signer certificate not found:ocsp_vfy.c:85:
Any idea what causes this error or how to get rid of it? OCSP on my nginx setup isn't working, i think it may relate to above error.
the full response:
openssl ocsp -issuer chain.pem -cert cert.pem -text -url http://ocsp.int-x1.letsencrypt.org -header "HOST" "ocsp.int-x1.letsencrypt.org" -no_nonce
OCSP Request Data:
Version: 1 (0x0)
Requestor List:
Certificate ID:
Hash Algorithm: sha1
Issuer Name Hash: BC5772E2797C56E39994598D75A4A3D24C4C85C5
Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1
Serial Number: 01CC634C0E3DB54D158DD9F342DDC32F9A82
OCSP Response Data:
OCSP Response Status: successful (0x0)
Response Type: Basic OCSP Response
Version: 1 (0x0)
Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X1
Produced At: Nov 17 09:39:00 2015 GMT
Responses:
Certificate ID:
Hash Algorithm: sha1
Issuer Name Hash: BC5772E2797C56E39994598D75A4A3D24C4C85C5
Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1
Serial Number: 01CC634C0E3DB54D158DD9F342DDC32F9A82
Cert Status: good
This Update: Nov 17 09:00:00 2015 GMT
Next Update: Nov 24 09:00:00 2015 GMT
Signature Algorithm: sha256WithRSAEncryption 61:d4:db:b4:7f:c1:e1:2b:cd:e3:4a:11:f3:ae:b5:ac:c1:ad: fd:1a:fc:93:1a:f7:86:99:3f:60:50:34:dc:ab:b3:54:c0:1a: e9:c1:8b:be:3b:0d:5a:9b:d9:d5:48:74:b5:49:1b:d7:52:14: 0d:67:17:5f:92:44:3b:6b:3c:9e:a4:04:e1:21:a0:7d:7b:23: 95:75:b9:a2:b9:1b:0b:65:d5:8d:81:de:a9:30:d6:52:c6:3e: ae:06:8b:fe:57:a9:fb:04:71:52:89:f9:ca:17:97:bf:1d:dc: 88:60:0f:97:05:50:00:3a:76:f0:3d:f4:b2:c9:ae:04:85:a5: 1c:68:fb:55:19:b7:07:d0:83:be:5b:3e:c2:f8:c8:b1:69:70: 29:59:78:fc:80:b1:74:29:3d:be:c7:c2:35:04:04:90:b9:92: 6b:0f:b5:9f:96:2b:55:a5:1a:81:79:8a:4c:bd:fa:0b:94:73: 39:49:13:8f:de:00:c4:99:b5:8f:0f:f5:8a:1e:f1:99:8e:73: d4:77:89:88:b9:0f:de:b5:13:3e:17:0d:b1:89:e9:3f:cd:74: c0:b8:8d:06:b7:c3:2d:e0:71:20:3a:f3:82:9d:fc:bf:94:e3: bb:99:19:b9:33:2e:ee:16:df:53:fd:7e:61:e7:85:2d:cb:45: cc:31:d4:cf
Response Verify Failure
140131535607456:error:27069076:OCSP routines:OCSP_basic_verify:signer certificate not found:ocsp_vfy.c:85:
cert.pem: good
This Update: Nov 17 09:00:00 2015 GMT
Next Update: Nov 24 09:00:00 2015 GMT