Sign OCSP staples with a responder intermediate1 actually delegated

Author: aidangarske

ocsp/stapling/Makefile

@@ -32,10 +32,12 @@ debug: all
 %: %.c
 	$(CC) -o $@ $< $(CFLAGS) $(LIBS)
 
+# the signer must be issued by server1's own issuer, or wolfSSL rejects the
+# response with BAD_OCSP_RESPONDER (RFC 6960 delegated responder)
 responder:
 	openssl ocsp -index responder-certs/index.txt -port 22221 \
-	    -rsigner responder-certs/ocsp-responder-cert.pem \
-		-rkey responder-certs/ocsp-responder-key.pem \
+	    -rsigner responder-certs/ocsp-responder-int1-cert.pem \
+		-rkey responder-certs/ocsp-responder-int1-key.pem \
 		-CA client-certs/intermediate1-ca-cert.pem
 
 clean:

ocsp/stapling/client-certs/intermediate1-ca-cert.pem

@@ -3,11 +3,11 @@ Certificate:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
         Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Engineering, CN = wolfSSL root CA, emailAddress = info@wolfssl.com
+        Issuer: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL root CA, emailAddress=facts@wolfssl.com
         Validity
-            Not Before: Dec 18 21:25:31 2024 GMT
-            Not After : Sep 14 21:25:31 2027 GMT
-        Subject: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Engineering, CN = wolfSSL intermediate CA 1, emailAddress = info@wolfssl.com
+            Not Before: Jun 11 21:44:34 2026 GMT
+            Not After : Mar  7 21:44:34 2029 GMT
+        Subject: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL intermediate CA 1, emailAddress=facts@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
@@ -38,68 +38,68 @@ Certificate:
                 83:C6:3A:89:2C:81:F4:02:D7:9D:4C:E2:2A:C0:71:82:64:44:DA:0E
             X509v3 Authority Key Identifier: 
                 keyid:73:B0:1C:A4:2F:82:CB:CF:47:A5:38:D7:B0:04:82:3A:7E:72:15:21
-                DirName:/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=wolfSSL root CA/emailAddress=info@wolfssl.com
+                DirName:/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=wolfSSL root CA/emailAddress=facts@wolfssl.com
                 serial:63
             X509v3 Key Usage: 
                 Certificate Sign, CRL Sign
             Authority Information Access: 
                 OCSP - URI:http://127.0.0.1:22220
     Signature Algorithm: sha256WithRSAEncryption
     Signature Value:
-        75:57:f1:0c:87:8f:a2:70:3c:ce:e4:70:0e:99:6a:da:c4:80:
-        94:2c:25:0c:de:0d:7b:f3:94:f1:e8:ad:6f:d0:de:9a:9d:f5:
-        64:31:65:3f:18:e6:c3:f5:b5:1d:a2:be:5b:97:79:41:78:15:
-        1c:b3:83:de:d0:00:ea:d2:70:43:c5:60:60:07:72:e5:76:59:
-        b8:0e:2f:47:c9:8d:a4:4c:f1:20:b0:40:3b:ed:e9:de:b2:46:
-        10:90:1b:0f:96:16:e6:97:bc:d5:9a:93:aa:3c:e3:b3:6b:5f:
-        db:2c:af:2b:da:7c:36:36:aa:86:a1:65:70:c8:f1:34:d1:1f:
-        10:96:71:e6:cf:69:5c:bf:0e:15:33:97:fe:40:42:be:30:48:
-        ad:fb:d7:0e:7b:73:dd:64:30:7e:10:81:ac:3b:0b:3c:e4:12:
-        9f:31:8b:3d:f0:9b:84:dc:5b:32:33:39:de:eb:1a:17:89:d8:
-        1b:00:33:2d:50:a4:1a:2c:11:a2:60:ac:c1:9a:0f:44:90:00:
-        cf:8d:6c:af:5b:71:23:7a:a7:4f:df:f5:3f:5c:ae:93:ca:4e:
-        ec:f0:1b:f4:fa:53:7d:d9:36:af:5e:4c:54:c7:3a:d5:e3:68:
-        ca:78:e5:1f:55:44:65:eb:00:2d:c3:c8:ba:0e:1f:47:1c:67:
-        2e:a9:c1:6e
+        1a:4e:f4:e6:eb:df:9e:b0:67:30:f2:ea:20:d6:f8:85:8f:5c:
+        e2:06:5b:16:98:9e:44:fe:e7:ce:5d:19:6d:7e:56:1a:4a:41:
+        e9:d8:b5:3a:1d:a9:fa:64:e6:e8:00:01:49:6a:63:59:e5:88:
+        dc:42:8f:c1:d1:5b:20:79:5c:16:a0:f1:75:15:9e:6a:86:a1:
+        6d:19:d1:76:fa:25:92:a9:42:8a:ac:91:38:ef:e0:8c:89:a1:
+        94:14:80:46:50:9c:84:8b:3a:c7:69:23:22:10:42:ad:a9:70:
+        43:da:56:27:fd:7b:97:00:cd:a8:6a:87:f4:bb:46:3d:a6:ae:
+        08:40:ee:eb:1c:ab:f2:44:79:13:81:68:d2:fb:de:78:b7:ee:
+        f3:e4:41:f7:aa:39:fc:48:fd:a6:69:4a:4c:02:f9:aa:ae:a7:
+        5e:24:0f:94:81:a5:64:c8:38:1b:dc:e1:78:0c:00:45:dc:a4:
+        dd:94:da:8e:6a:d0:2c:8a:bf:57:bb:ea:74:1b:66:f0:e1:89:
+        f9:28:27:e8:cc:81:fe:b3:11:d4:76:b0:32:a3:00:1c:04:62:
+        98:14:c7:7d:1e:79:fa:e2:6e:f9:65:13:dc:74:4a:38:7b:ef:
+        4e:3b:bd:a9:db:52:e9:40:cc:dd:73:b3:95:e2:20:d6:a5:99:
+        ad:00:82:5b
 -----BEGIN CERTIFICATE-----
-MIIE8DCCA9igAwIBAgIBATANBgkqhkiG9w0BAQsFADCBlzELMAkGA1UEBhMCVVMx
+MIIE8zCCA9ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMx
 EzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoM
 B3dvbGZTU0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMRgwFgYDVQQDDA93b2xmU1NM
-IHJvb3QgQ0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjQx
-MjE4MjEyNTMxWhcNMjcwOTE0MjEyNTMxWjCBoTELMAkGA1UEBhMCVVMxEzARBgNV
-BAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoMB3dvbGZT
-U0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMSIwIAYDVQQDDBl3b2xmU1NMIGludGVy
-bWVkaWF0ZSBDQSAxMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tMIIB
-IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rTIXHfgLbH1ua0WRzWgNWVl
-xuFAqx60uRO3y4y7d6V22m2Hh/ZKTRPkJj4nh+5bx2o/RTBhVVz2NdFl+pgRo6dV
-1b6Rgkv8vpDWUFNjmiwi4TUR3HgCl4rkRpKcUwh23h9TtrjKdz55brzQ4w0wW0z2
-lA0wKWSfBOXb+4lgZ7uvJoNRdyQvKwuhlIEQmOjrJqgefOTEbGcGlVVK3VL08mBt
-ASsZkTVtpAhHBnEkANnexlbzi1Ms4pqWpfNi5cTjI/LS/CHqD2J2jdWZSM7cWMS7
-f9qULIB0g8XgsBV+Qf0O8vTweHZ7rSYNqkiWFy8h45UrJjf5qoAv/t72XryXfwID
-AQABo4IBOTCCATUwDAYDVR0TBAUwAwEB/zAdBgNVHQ4EFgQUg8Y6iSyB9ALXnUzi
-KsBxgmRE2g4wgcQGA1UdIwSBvDCBuYAUc7AcpC+Cy89HpTjXsASCOn5yFSGhgZ2k
-gZowgZcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQH
-DAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtFbmdpbmVlcmlu
-ZzEYMBYGA1UEAwwPd29sZlNTTCByb290IENBMR8wHQYJKoZIhvcNAQkBFhBpbmZv
-QHdvbGZzc2wuY29tggFjMAsGA1UdDwQEAwIBBjAyBggrBgEFBQcBAQQmMCQwIgYI
-KwYBBQUHMAGGFmh0dHA6Ly8xMjcuMC4wLjE6MjIyMjAwDQYJKoZIhvcNAQELBQAD
-ggEBAHVX8QyHj6JwPM7kcA6ZatrEgJQsJQzeDXvzlPHorW/Q3pqd9WQxZT8Y5sP1
-tR2ivluXeUF4FRyzg97QAOrScEPFYGAHcuV2WbgOL0fJjaRM8SCwQDvt6d6yRhCQ
-Gw+WFuaXvNWak6o847NrX9ssryvafDY2qoahZXDI8TTRHxCWcebPaVy/DhUzl/5A
-Qr4wSK371w57c91kMH4Qgaw7CzzkEp8xiz3wm4TcWzIzOd7rGheJ2BsAMy1QpBos
-EaJgrMGaD0SQAM+NbK9bcSN6p0/f9T9crpPKTuzwG/T6U33ZNq9eTFTHOtXjaMp4
-5R9VRGXrAC3DyLoOH0ccZy6pwW4=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 -----END CERTIFICATE-----
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 99 (0x63)
         Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Engineering, CN = wolfSSL root CA, emailAddress = info@wolfssl.com
+        Issuer: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL root CA, emailAddress=facts@wolfssl.com
         Validity
-            Not Before: Dec 18 21:25:31 2024 GMT
-            Not After : Sep 14 21:25:31 2027 GMT
-        Subject: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Engineering, CN = wolfSSL root CA, emailAddress = info@wolfssl.com
+            Not Before: Jun 11 21:44:34 2026 GMT
+            Not After : Mar  7 21:44:34 2029 GMT
+        Subject: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL root CA, emailAddress=facts@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
@@ -130,55 +130,55 @@ Certificate:
                 73:B0:1C:A4:2F:82:CB:CF:47:A5:38:D7:B0:04:82:3A:7E:72:15:21
             X509v3 Authority Key Identifier: 
                 keyid:73:B0:1C:A4:2F:82:CB:CF:47:A5:38:D7:B0:04:82:3A:7E:72:15:21
-                DirName:/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=wolfSSL root CA/emailAddress=info@wolfssl.com
+                DirName:/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=wolfSSL root CA/emailAddress=facts@wolfssl.com
                 serial:63
             X509v3 Key Usage: 
                 Certificate Sign, CRL Sign
             Authority Information Access: 
                 OCSP - URI:http://127.0.0.1:22220
     Signature Algorithm: sha256WithRSAEncryption
     Signature Value:
-        76:e8:fa:f6:1e:5b:0e:ff:24:43:e0:cb:19:26:38:d9:df:18:
-        5d:66:e1:4b:ac:e4:8e:b0:49:2c:d6:04:20:eb:4a:a8:06:d7:
-        55:ec:6b:38:f8:0f:8c:e6:c9:ec:42:f0:ca:07:9f:88:7a:ee:
-        bf:af:3f:7d:d3:45:67:20:84:bb:c7:c5:32:69:ab:59:e1:e3:
-        38:4b:ed:18:2e:de:da:88:ec:a0:b7:ff:c1:50:96:73:e3:03:
-        df:a1:e7:47:93:13:1d:fb:e6:6b:37:3e:50:a3:eb:5b:24:26:
-        d2:43:2e:6e:9c:83:9c:fb:79:ba:cd:fd:3b:e5:87:87:a7:0f:
-        5f:f9:64:34:56:5e:8b:13:e2:c4:41:e3:9d:3e:36:2d:cb:d3:
-        5f:d3:12:90:bf:78:c1:4c:df:eb:7b:99:e6:1e:ee:52:78:6f:
-        0c:82:e1:59:d4:25:40:e5:24:95:3e:0f:cc:08:60:fe:b4:8c:
-        48:42:bf:29:74:92:71:1a:85:00:a7:4c:f0:c0:32:47:f3:be:
-        f4:08:5c:f2:43:e0:b9:76:86:60:9a:3b:af:d6:32:41:5f:b0:
-        04:12:44:2a:44:19:d4:27:d3:ce:71:7e:5b:16:1a:f5:0c:db:
-        43:b0:a6:bb:76:02:f6:e0:30:4e:04:f4:f3:9b:cd:d4:ae:45:
-        94:c5:8c:bb
+        36:b1:86:d6:72:f8:e7:6a:ae:43:fb:c0:ed:f1:36:64:8a:da:
+        8e:5f:f7:c4:ad:64:c8:29:03:74:58:b0:9e:ee:41:89:5b:2a:
+        12:f4:82:a4:03:a5:f0:df:a2:84:cb:2b:b3:16:0f:dc:cf:cc:
+        56:99:61:a9:f9:3d:3a:7e:e4:12:43:c3:b1:4f:58:26:79:e7:
+        e4:0d:a5:88:3d:79:33:a1:09:7d:78:af:bd:59:71:11:54:4a:
+        cc:d6:d2:6d:1f:88:27:ac:d5:bf:75:fc:c3:05:0b:cd:c8:0e:
+        72:41:1d:d8:68:62:be:94:d7:60:be:05:4a:42:9c:50:b7:45:
+        71:6d:83:9a:ef:08:5c:41:db:c8:62:33:3c:69:a2:8a:b4:0f:
+        db:65:c4:b7:92:0a:76:f7:55:06:77:8c:ff:8c:84:84:d9:dd:
+        46:11:2a:2d:27:96:a7:f5:47:c1:43:4b:fe:53:d8:be:16:94:
+        36:0a:d4:be:c3:6c:9b:0c:52:31:4a:eb:62:b4:81:4b:2d:f7:
+        f1:65:c1:ee:36:79:19:f7:ab:16:f8:38:d2:ea:87:8d:f8:f9:
+        14:82:db:67:b6:94:a8:55:0b:90:6b:af:b0:e9:42:64:42:6d:
+        2c:e3:f1:b6:e0:f9:58:ed:69:66:62:98:dc:5a:7b:fa:35:5a:
+        23:84:91:0e
 -----BEGIN CERTIFICATE-----
-MIIE5jCCA86gAwIBAgIBYzANBgkqhkiG9w0BAQsFADCBlzELMAkGA1UEBhMCVVMx
+MIIE6TCCA9GgAwIBAgIBYzANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMx
 EzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoM
 B3dvbGZTU0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMRgwFgYDVQQDDA93b2xmU1NM
-IHJvb3QgQ0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjQx
-MjE4MjEyNTMxWhcNMjcwOTE0MjEyNTMxWjCBlzELMAkGA1UEBhMCVVMxEzARBgNV
-BAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoMB3dvbGZT
-U0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMRgwFgYDVQQDDA93b2xmU1NMIHJvb3Qg
-Q0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQCrLLQvHQYJ704phoR+zL+meXzwwMFkJYx1txAF
-ykgnDA4yHLD+mYU5trmi9yf/bTyMFnMpIX+LplRxkK3MBbmfFccKP19p9ApfjHG1
-LL9m4gOaMvTS7CqJS/k1iBQzR04uBXkB7WQ2drn4hc0BiKzFsrFZuM1a9AkJOJva
-Ws/OeJkfST1B1gZ8UpnIl9GzgDqiTzbExZYwdzE4yHDM4WcGsysvk7Vpz4N+iFOb
-D0YhTNYFNkSZYGhH5TIBEtQQc66aNJT6brhYT3tbipKXrf2XuXXKwtRFfRdrzS/z
-Y3oOMLULqdmmfHRgncwJA0PxD5DTt/5sn9nNeEsVroxb+ZmBAgMBAAGjggE5MIIB
-NTAMBgNVHRMEBTADAQH/MB0GA1UdDgQWBBRzsBykL4LLz0elONewBII6fnIVITCB
-xAYDVR0jBIG8MIG5gBRzsBykL4LLz0elONewBII6fnIVIaGBnaSBmjCBlzELMAkG
-A1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUx
-EDAOBgNVBAoMB3dvbGZTU0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMRgwFgYDVQQD
-DA93b2xmU1NMIHJvb3QgQ0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5j
-b22CAWMwCwYDVR0PBAQDAgEGMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYW
-aHR0cDovLzEyNy4wLjAuMToyMjIyMDANBgkqhkiG9w0BAQsFAAOCAQEAduj69h5b
-Dv8kQ+DLGSY42d8YXWbhS6zkjrBJLNYEIOtKqAbXVexrOPgPjObJ7ELwygefiHru
-v68/fdNFZyCEu8fFMmmrWeHjOEvtGC7e2ojsoLf/wVCWc+MD36HnR5MTHfvmazc+
-UKPrWyQm0kMubpyDnPt5us39O+WHh6cPX/lkNFZeixPixEHjnT42LcvTX9MSkL94
-wUzf63uZ5h7uUnhvDILhWdQlQOUklT4PzAhg/rSMSEK/KXSScRqFAKdM8MAyR/O+
-9Ahc8kPguXaGYJo7r9YyQV+wBBJEKkQZ1CfTznF+WxYa9QzbQ7Cmu3YC9uAwTgT0
-85vN1K5FlMWMuw==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 -----END CERTIFICATE-----