OpenSSL OCSP Error -
i set openssl ocsp-responder , error when try verify certificate:
waiting ocsp client connections... error creating serial number index:(2,5,6) 139796227208864:error:0e06d06c:configuration file routines:nconf_get_string:no value:conf_lib.c:335:group= name=unique_subject
the index.txt looks this:
v 20250623124428z "empty" 71 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=h4wrsuohq9@pqr36g64vq.brc v 20250623124434z "empty" c9 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=fyonrgqouf@ioyo0facqm.6vv r 20250623173301z 150626174629z 3 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de v 20250623124441z "empty" da unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=fovgwbka1j@otfd0az5ud.qah v 20250623124447z "empty" 81 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=reeu9ujiyu@tuloikdqcu.h23 r 20250623173250z 150626174629z 1 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de v 20250623151856z "empty" 1 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=vh4cs0tqn4@osepgfcxth.uet v 20250623155859z "empty" 1 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=hx2arrilsc@eizycueoa1.qbo r 20250623173255z 150626174629z 2 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623155941z 150626172924z 1 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=rk6jjcfb55@gkgpjtrway.qdn v 20250623172650z "empty" 1 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=tmkbm8fwq7@48zfe0tlrr.5mw v 20250623172656z "empty" 1 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=apn2299vvy@emm17oqadj.476 r 20250623173356z 150626174629z 4 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623173423z 150626174629z 5 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623173426z 150626174629z 6 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623173428z 150626174629z 7 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623173430z 150626174629z 8 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623173432z 150626174629z 9 unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623173434z 150626174629z unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623173436z 150626174629z b unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de r 20250623174556z 150626174629z c unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de v 20250623174629z "empty" d unknown /c=de/st=nrw/l=minden/o=fh bielefeld/ou=technik/cn=****@****.de
(the * anonymisation)
a serial file exists right certificates. call ocsp way:
openssl ocsp -index /opt/pki/ca/index.txt -port 8888 -rsigner /opt/pki/va/va-cert.crt -rkey /opt/pki/va/va-key.pem -ca /opt/pki/ca/ca-cert.pem -text
does know error , can me?
thank you
i've found solution. ocsp can't deal multiple equal ids (column 4).
Comments
Post a Comment