cloudflare / cloudflare/cfssl

OCSP for multirootCA is not working

Open
#746 3 comments 5 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

I am not sure if I am configuring the CFSSL in the right way. Please let me know if there is an issue with my configuration.

Following is the scenario that I have tried to setup:

Db used : postgres
1 Root CA and 5 Intermediate CAs signed by that rootCA { ICA1, ICA2, ICA3, ICA4 and ICA5 }

Used ICA1 in the **cfssl serve** command.
Used others ICAs in **multirootca** command (creating a configuration)

I am able to issue certs with all the ICAs just fine. I have the entries for the certs in the certificate table also.

Running **ocsprefresh** command fails with the following exception :
`bin/cfssl ocsprefresh -db-config db-config.json -ca ICA2.pem -responder OCSP/ocsp.pem -responder-key OCSP/ocsp-key.pem
2017/04/05 18:58:59 [CRITICAL] Unable to sign OCSP response: {"code":8100,"message":"Certificate not issued by this issuer"}
{"code":8100,"message":"Certificate not issued by this issuer"}`

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.