Comments (3)
hmm... could it be that something in the logic around https://github.com/openca/openca-ocspd/blob/master/src/ocspd/crl.c#L274 is not correct and the crl just was not valid yet and it should have triggered the other branch of the error handling there? Could you try again?
Your lastUpdate was yesterday afternoon but you have opened this issue yesterday morning, so if you check the same file today it might work - but still the error message would have been the wrong one.
from openca-ocspd.
Indeed was the time issue, I just realised my system is in the wrong timezone and therefore the time was in the future.
It works now, thank you for the help.
from openca-ocspd.
@gvandenbosch correct time settings are crucial for handling certificates and crls.
Anyhow, you should have received the following error in this case:
CRL Validity Check FAILED [CA: %s, Error: Not Valid Yet, Code: %d]
@opencrypto I think instead of if (i == 0){
it should read if (i > 0) {
here: https://github.com/openca/openca-ocspd/blob/master/src/ocspd/crl.c#L274
from openca-ocspd.
Related Issues (20)
- Can openca-ocspd-3.1.1 use LDAPv3 bind
- Minor POD issue (no trailing =back tag, specific to RHEL7 / perl 5.16+ / podlaters 2.5+) HOT 1
- ocspd returns internalError on revoked certificate verification HOT 2
- Incorrect signature algorithm returned when signing ocsp request with non-rsa key
- all documentations link to https://www.openca.org/wiki/ are down...
- 3.1.2-1 - Failed dependencies libpki 0.9.0 HOT 4
- Segfault at startup
- openca-ocspd-3.1.2-1.el7.x86_64 Requires: libpki.so.89()(64bit) error HOT 11
- OCSPD v3.1.2 - Can not parse cert HOT 4
- systemd service
- Database storage
- Valid certificates list
- Segmentation fault at PKI_X509_verify in crl.c
- How to configure OCSP responder to support nonce option?
- OCSPD Revoked Certificate Response Error HOT 1
- Segmentation fault with libpki 0.99.2-rc2 and openssl 3.0.11
- HTTPS
- Newbie on OpenCA's OCSP Responder setup HOT 2
- Setup Instructions
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from openca-ocspd.