OCSP for multirootCA is not working
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
I am not sure if I am configuring the CFSSL in the right way. Please let me know if there is an issue with my configuration.
Following is the scenario that I have tried to setup:
Db used : postgres
1 Root CA and 5 Intermediate CAs signed by that rootCA { ICA1, ICA2, ICA3, ICA4 and ICA5 }
Used ICA1 in the **cfssl serve** command.
Used others ICAs in **multirootca** command (creating a configuration)
I am able to issue certs with all the ICAs just fine. I have the entries for the certs in the certificate table also.
Running **ocsprefresh** command fails with the following exception :
`bin/cfssl ocsprefresh -db-config db-config.json -ca ICA2.pem -responder OCSP/ocsp.pem -responder-key OCSP/ocsp-key.pem
2017/04/05 18:58:59 [CRITICAL] Unable to sign OCSP response: {"code":8100,"message":"Certificate not issued by this issuer"}
{"code":8100,"message":"Certificate not issued by this issuer"}`
Contributor guide
Assessment
This issue has not been assessed yet.