Skip to content

Commit 8fca95c

Browse files
douzzerdouzzer
authored
Merge pull request #10532 from rlm2002/zd21800
Remove chain walk for OCSP responder
2 parents 02d0879 + 5c3100e commit 8fca95c

23 files changed

Lines changed: 1051 additions & 682 deletions

‎.github/workflows/ocsp.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
run: autoreconf -ivf && ./configure --enable-ocsp --enable-ocspstapling && make
2828

2929
- name: Start OCSP responder 1
30-
run: openssl ocsp -port 22221 -ndays 1000 -index certs/ocsp/index-intermediate1-ca-issued-certs.txt -rsigner certs/ocsp/ocsp-responder-cert.pem -rkey certs/ocsp/ocsp-responder-key.pem -CA certs/ocsp/intermediate1-ca-cert.pem &
30+
run: openssl ocsp -port 22221 -ndays 1000 -index certs/ocsp/index-intermediate1-ca-issued-certs.txt -rsigner certs/ocsp/ocsp-responder-int1-cert.pem -rkey certs/ocsp/ocsp-responder-int1-key.pem -CA certs/ocsp/intermediate1-ca-cert.pem &
3131

3232
- name: Start OCSP responder 2
3333
run: openssl ocsp -port 22220 -ndays 1000 -index certs/ocsp/index-ca-and-intermediate-cas.txt -rsigner certs/ocsp/ocsp-responder-cert.pem -rkey certs/ocsp/ocsp-responder-key.pem -CA certs/ocsp/root-ca-cert.pem &

‎.wolfssl_known_macro_extras‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -845,7 +845,6 @@ WOLFSSL_NO_KCAPI_SHA224
845845
WOLFSSL_NO_KTRI_ORACLE_WARNING
846846
WOLFSSL_NO_LMS_SHAKE256_256
847847
WOLFSSL_NO_OCSP_DATE_CHECK
848-
WOLFSSL_NO_OCSP_ISSUER_CHAIN_CHECK
849848
WOLFSSL_NO_OCSP_OPTIONAL_CERTS
850849
WOLFSSL_NO_RSA_KEY_CHECK
851850
WOLFSSL_NO_SERVER_GROUPS_EXT

‎ChangeLog.md‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,14 @@
4646
per-record nonce. Scoped to TLS 1.3, non-DTLS, non-QUIC; requires
4747
`WOLF_CRYPTO_CB` and `WOLF_CRYPTO_CB_AES_SETKEY`.
4848

49+
* **BREAKING (RFC 6960 4.2.2.2)**: OCSP responder authorization is now
50+
strictly enforced. Removes the non-compliant `CheckOcspResponderChain()`
51+
fallback, which authorized any OCSP responder cert issued by an ancestor
52+
of the target's issuer; [RFC 6960 4.2.2.2](https://datatracker.ietf.org/doc/html/rfc6960#section-4.2.2.2)
53+
requires direct issuance by the CA identified in the request. Also
54+
removes the now-unused `WOLFSSL_NO_OCSP_ISSUER_CHAIN_CHECK` macro and
55+
the `vp` parameter from `CheckOcspResponder()`.
56+
4957
# wolfSSL Release 5.9.1 (Apr. 8, 2026)
5058

5159
Release 5.9.1 has been developed according to wolfSSL's development and QA

‎certs/ocsp/include.am‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,10 @@ EXTRA_DIST += \
2929
certs/ocsp/ocsp-responder-key.der \
3030
certs/ocsp/ocsp-responder-cert.pem \
3131
certs/ocsp/ocsp-responder-cert.der \
32+
certs/ocsp/ocsp-responder-int1-key.pem \
33+
certs/ocsp/ocsp-responder-int1-key.der \
34+
certs/ocsp/ocsp-responder-int1-cert.pem \
35+
certs/ocsp/ocsp-responder-int1-cert.der \
3236
certs/ocsp/server1-key.pem \
3337
certs/ocsp/server1-key.der \
3438
certs/ocsp/server1-cert.pem \

‎certs/ocsp/ocsp-responder-int1-cert.der‎

1.2 KB
Binary file not shown.

‎certs/ocsp/ocsp-responder-int1-cert.pem‎

Lines changed: 273 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,273 @@
1+
Certificate:
2+
Data:
3+
Version: 3 (0x2)
4+
Serial Number: 10 (0xa)
5+
Signature Algorithm: sha256WithRSAEncryption
6+
Issuer: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL intermediate CA 1, emailAddress=info@wolfssl.com
7+
Validity
8+
Not Before: May 27 16:15:23 2026 GMT
9+
Not After : Feb 20 16:15:23 2029 GMT
10+
Subject: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL OCSP Responder Int1, emailAddress=info@wolfssl.com
11+
Subject Public Key Info:
12+
Public Key Algorithm: rsaEncryption
13+
Public-Key: (2048 bit)
14+
Modulus:
15+
00:98:82:f0:e7:da:58:cf:85:0b:a4:de:34:41:3f:
16+
79:5a:ff:75:78:95:c6:89:5c:b7:2e:c4:6d:05:73:
17+
a5:b1:45:58:72:3e:2c:e2:c0:17:87:fe:b4:64:82:
18+
00:fd:56:7d:8a:73:8d:6f:88:77:bb:98:56:a8:b6:
19+
28:36:a8:0c:9f:d6:7a:25:1d:ad:10:b8:d0:19:7c:
20+
80:70:9c:80:26:95:53:42:1c:90:4e:27:ed:f5:6e:
21+
87:6f:2e:eb:92:95:e0:6f:53:fe:be:17:a9:7f:e6:
22+
b7:09:4b:63:9c:08:97:c8:b3:36:75:38:6d:3e:ff:
23+
d8:e1:22:75:57:1a:5f:60:30:4d:1b:bc:2f:99:7f:
24+
02:ef:df:24:25:88:57:91:7b:2c:6f:f7:98:90:29:
25+
9f:12:66:a9:3e:73:c4:81:73:e7:9c:eb:22:f5:6c:
26+
d5:23:e0:7b:ba:a6:ca:16:a3:33:f9:2e:52:a3:a8:
27+
c9:f1:dd:85:1f:c1:94:0b:1e:8f:b7:48:be:20:d0:
28+
da:bd:3b:85:8e:92:c1:f0:7c:ec:2e:c5:27:a0:4e:
29+
22:c5:c2:4d:1b:66:e7:ac:57:8c:34:2b:a5:55:e9:
30+
34:9c:7f:33:29:d0:4e:cb:1a:1a:02:17:b2:45:a3:
31+
49:05:5d:00:79:85:50:91:c0:3d:30:cb:84:0a:9a:
32+
2d:6d
33+
Exponent: 65537 (0x10001)
34+
X509v3 extensions:
35+
X509v3 Basic Constraints:
36+
CA:FALSE
37+
X509v3 Subject Key Identifier:
38+
90:3C:B9:FB:15:20:AB:F6:6F:D3:F1:C9:71:B0:D0:1D:97:C6:A5:C5
39+
X509v3 Authority Key Identifier:
40+
keyid:83:C6:3A:89:2C:81:F4:02:D7:9D:4C:E2:2A:C0:71:82:64:44:DA:0E
41+
DirName:/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=wolfSSL root CA/emailAddress=info@wolfssl.com
42+
serial:01
43+
X509v3 Extended Key Usage:
44+
OCSP Signing
45+
Signature Algorithm: sha256WithRSAEncryption
46+
Signature Value:
47+
3c:42:b5:c3:a3:1a:d7:2d:c6:6a:3d:b2:5c:18:49:85:26:65:
48+
85:af:c2:2e:46:dc:a1:1c:8d:22:86:fc:a9:73:02:79:60:3e:
49+
e7:f8:cc:ff:c9:b1:38:e0:96:4f:31:b8:e5:b5:0c:b0:1d:1c:
50+
c2:27:29:c7:3f:70:86:5a:61:2e:11:c7:81:75:8a:72:f8:75:
51+
0c:84:be:65:44:98:ce:29:87:02:30:ed:42:47:fc:75:d9:88:
52+
73:64:ad:6b:cd:32:96:55:ea:b5:fb:8e:21:ce:02:59:dc:3e:
53+
9f:33:40:66:c4:be:f0:71:88:ce:f5:98:79:2d:dd:58:2b:28:
54+
bf:09:89:88:05:3e:36:de:e6:b1:9a:fc:4a:80:1b:00:fd:c9:
55+
2a:46:ce:8c:64:81:b8:25:c9:7d:d2:31:05:2c:49:57:e9:84:
56+
c0:a4:dc:f6:20:7e:fb:c1:d7:c5:bc:ea:07:bf:e6:10:a0:53:
57+
25:4f:7e:c5:77:a8:b4:c6:98:2c:72:76:49:ea:e5:45:bb:c4:
58+
e5:fc:4b:9c:08:64:b4:2f:bf:97:8e:84:84:d7:30:82:7f:32:
59+
25:73:00:d5:58:44:2b:4a:2c:08:79:86:50:0f:e9:e7:94:d1:
60+
d4:0e:4f:a9:e0:ab:ba:8b:e8:1a:be:90:92:64:39:10:35:90:
61+
09:7f:ed:69
62+
-----BEGIN CERTIFICATE-----
63+
MIIEzTCCA7WgAwIBAgIBCjANBgkqhkiG9w0BAQsFADCBoTELMAkGA1UEBhMCVVMx
64+
EzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoM
65+
B3dvbGZTU0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMSIwIAYDVQQDDBl3b2xmU1NM
66+
IGludGVybWVkaWF0ZSBDQSAxMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wu
67+
Y29tMB4XDTI2MDUyNzE2MTUyM1oXDTI5MDIyMDE2MTUyM1owgaMxCzAJBgNVBAYT
68+
AlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRAwDgYD
69+
VQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtFbmdpbmVlcmluZzEkMCIGA1UEAwwbd29s
70+
ZlNTTCBPQ1NQIFJlc3BvbmRlciBJbnQxMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
71+
bGZzc2wuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmILw59pY
72+
z4ULpN40QT95Wv91eJXGiVy3LsRtBXOlsUVYcj4s4sAXh/60ZIIA/VZ9inONb4h3
73+
u5hWqLYoNqgMn9Z6JR2tELjQGXyAcJyAJpVTQhyQTift9W6Hby7rkpXgb1P+vhep
74+
f+a3CUtjnAiXyLM2dThtPv/Y4SJ1VxpfYDBNG7wvmX8C798kJYhXkXssb/eYkCmf
75+
EmapPnPEgXPnnOsi9WzVI+B7uqbKFqMz+S5So6jJ8d2FH8GUCx6Pt0i+INDavTuF
76+
jpLB8HzsLsUnoE4ixcJNG2bnrFeMNCulVek0nH8zKdBOyxoaAheyRaNJBV0AeYVQ
77+
kcA9MMuECpotbQIDAQABo4IBCjCCAQYwCQYDVR0TBAIwADAdBgNVHQ4EFgQUkDy5
78+
+xUgq/Zv0/HJcbDQHZfGpcUwgcQGA1UdIwSBvDCBuYAUg8Y6iSyB9ALXnUziKsBx
79+
gmRE2g6hgZ2kgZowgZcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9u
80+
MRAwDgYDVQQHDAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtF
81+
bmdpbmVlcmluZzEYMBYGA1UEAwwPd29sZlNTTCByb290IENBMR8wHQYJKoZIhvcN
82+
AQkBFhBpbmZvQHdvbGZzc2wuY29tggEBMBMGA1UdJQQMMAoGCCsGAQUFBwMJMA0G
83+
CSqGSIb3DQEBCwUAA4IBAQA8QrXDoxrXLcZqPbJcGEmFJmWFr8IuRtyhHI0ihvyp
84+
cwJ5YD7n+Mz/ybE44JZPMbjltQywHRzCJynHP3CGWmEuEceBdYpy+HUMhL5lRJjO
85+
KYcCMO1CR/x12YhzZK1rzTKWVeq1+44hzgJZ3D6fM0BmxL7wcYjO9Zh5Ld1YKyi/
86+
CYmIBT423uaxmvxKgBsA/ckqRs6MZIG4Jcl90jEFLElX6YTApNz2IH77wdfFvOoH
87+
v+YQoFMlT37Fd6i0xpgscnZJ6uVFu8Tl/EucCGS0L7+XjoSE1zCCfzIlcwDVWEQr
88+
SiwIeYZQD+nnlNHUDk+p4Ku6i+gavpCSZDkQNZAJf+1p
89+
-----END CERTIFICATE-----
90+
Certificate:
91+
Data:
92+
Version: 3 (0x2)
93+
Serial Number: 1 (0x1)
94+
Signature Algorithm: sha256WithRSAEncryption
95+
Issuer: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL root CA, emailAddress=info@wolfssl.com
96+
Validity
97+
Not Before: Nov 13 20:41:34 2025 GMT
98+
Not After : Aug 9 20:41:34 2028 GMT
99+
Subject: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL intermediate CA 1, emailAddress=info@wolfssl.com
100+
Subject Public Key Info:
101+
Public Key Algorithm: rsaEncryption
102+
Public-Key: (2048 bit)
103+
Modulus:
104+
00:de:b4:c8:5c:77:e0:2d:b1:f5:b9:ad:16:47:35:
105+
a0:35:65:65:c6:e1:40:ab:1e:b4:b9:13:b7:cb:8c:
106+
bb:77:a5:76:da:6d:87:87:f6:4a:4d:13:e4:26:3e:
107+
27:87:ee:5b:c7:6a:3f:45:30:61:55:5c:f6:35:d1:
108+
65:fa:98:11:a3:a7:55:d5:be:91:82:4b:fc:be:90:
109+
d6:50:53:63:9a:2c:22:e1:35:11:dc:78:02:97:8a:
110+
e4:46:92:9c:53:08:76:de:1f:53:b6:b8:ca:77:3e:
111+
79:6e:bc:d0:e3:0d:30:5b:4c:f6:94:0d:30:29:64:
112+
9f:04:e5:db:fb:89:60:67:bb:af:26:83:51:77:24:
113+
2f:2b:0b:a1:94:81:10:98:e8:eb:26:a8:1e:7c:e4:
114+
c4:6c:67:06:95:55:4a:dd:52:f4:f2:60:6d:01:2b:
115+
19:91:35:6d:a4:08:47:06:71:24:00:d9:de:c6:56:
116+
f3:8b:53:2c:e2:9a:96:a5:f3:62:e5:c4:e3:23:f2:
117+
d2:fc:21:ea:0f:62:76:8d:d5:99:48:ce:dc:58:c4:
118+
bb:7f:da:94:2c:80:74:83:c5:e0:b0:15:7e:41:fd:
119+
0e:f2:f4:f0:78:76:7b:ad:26:0d:aa:48:96:17:2f:
120+
21:e3:95:2b:26:37:f9:aa:80:2f:fe:de:f6:5e:bc:
121+
97:7f
122+
Exponent: 65537 (0x10001)
123+
X509v3 extensions:
124+
X509v3 Basic Constraints:
125+
CA:TRUE
126+
X509v3 Subject Key Identifier:
127+
83:C6:3A:89:2C:81:F4:02:D7:9D:4C:E2:2A:C0:71:82:64:44:DA:0E
128+
X509v3 Authority Key Identifier:
129+
keyid:73:B0:1C:A4:2F:82:CB:CF:47:A5:38:D7:B0:04:82:3A:7E:72:15:21
130+
DirName:/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=wolfSSL root CA/emailAddress=info@wolfssl.com
131+
serial:63
132+
X509v3 Key Usage:
133+
Certificate Sign, CRL Sign
134+
Authority Information Access:
135+
OCSP - URI:http://127.0.0.1:22220
136+
Signature Algorithm: sha256WithRSAEncryption
137+
Signature Value:
138+
77:ec:89:37:d4:35:2e:24:fd:d2:de:d9:98:87:be:52:ae:b5:
139+
d4:f6:13:34:12:2c:f0:78:98:07:9f:f7:e4:76:df:6e:eb:97:
140+
c7:03:a3:e6:15:6e:e2:94:16:6b:ed:59:a9:4a:10:a0:cc:c2:
141+
61:78:c7:fb:1c:04:4a:20:c1:fc:94:c6:99:b0:3a:8c:2f:2b:
142+
7d:15:30:53:c7:9b:73:54:6f:4d:16:a6:ab:2d:8a:51:70:1f:
143+
1b:8e:60:0b:56:8b:f2:94:01:fd:81:5f:73:cb:ed:5e:cc:4a:
144+
71:c1:a9:1a:d7:c7:2b:5a:66:02:77:da:10:e8:45:42:a0:7c:
145+
ef:78:ff:dd:08:f6:84:2f:41:f5:18:c9:a2:48:d1:5d:b6:a4:
146+
4d:32:af:83:5d:b9:64:ec:40:e9:62:38:ef:1b:d1:8e:c9:e8:
147+
fd:b3:e8:e1:a1:da:16:1e:26:3c:82:36:cb:8d:80:67:33:ca:
148+
30:bf:93:03:c8:9c:be:a2:6f:aa:7c:76:24:3d:06:99:ab:a7:
149+
fe:12:f3:db:fd:a0:8a:b5:0d:c1:9c:90:b7:ca:7e:6d:fb:ff:
150+
2a:c3:fe:7c:9f:41:e8:c2:7f:4f:fa:4b:49:c4:a0:d0:bc:fd:
151+
38:34:22:ff:d5:83:79:70:7f:6c:30:8d:ad:93:fb:b8:77:01:
152+
34:af:cc:0e
153+
-----BEGIN CERTIFICATE-----
154+
MIIE8DCCA9igAwIBAgIBATANBgkqhkiG9w0BAQsFADCBlzELMAkGA1UEBhMCVVMx
155+
EzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoM
156+
B3dvbGZTU0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMRgwFgYDVQQDDA93b2xmU1NM
157+
IHJvb3QgQ0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjUx
158+
MTEzMjA0MTM0WhcNMjgwODA5MjA0MTM0WjCBoTELMAkGA1UEBhMCVVMxEzARBgNV
159+
BAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoMB3dvbGZT
160+
U0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMSIwIAYDVQQDDBl3b2xmU1NMIGludGVy
161+
bWVkaWF0ZSBDQSAxMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tMIIB
162+
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rTIXHfgLbH1ua0WRzWgNWVl
163+
xuFAqx60uRO3y4y7d6V22m2Hh/ZKTRPkJj4nh+5bx2o/RTBhVVz2NdFl+pgRo6dV
164+
1b6Rgkv8vpDWUFNjmiwi4TUR3HgCl4rkRpKcUwh23h9TtrjKdz55brzQ4w0wW0z2
165+
lA0wKWSfBOXb+4lgZ7uvJoNRdyQvKwuhlIEQmOjrJqgefOTEbGcGlVVK3VL08mBt
166+
ASsZkTVtpAhHBnEkANnexlbzi1Ms4pqWpfNi5cTjI/LS/CHqD2J2jdWZSM7cWMS7
167+
f9qULIB0g8XgsBV+Qf0O8vTweHZ7rSYNqkiWFy8h45UrJjf5qoAv/t72XryXfwID
168+
AQABo4IBOTCCATUwDAYDVR0TBAUwAwEB/zAdBgNVHQ4EFgQUg8Y6iSyB9ALXnUzi
169+
KsBxgmRE2g4wgcQGA1UdIwSBvDCBuYAUc7AcpC+Cy89HpTjXsASCOn5yFSGhgZ2k
170+
gZowgZcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQH
171+
DAdTZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtFbmdpbmVlcmlu
172+
ZzEYMBYGA1UEAwwPd29sZlNTTCByb290IENBMR8wHQYJKoZIhvcNAQkBFhBpbmZv
173+
QHdvbGZzc2wuY29tggFjMAsGA1UdDwQEAwIBBjAyBggrBgEFBQcBAQQmMCQwIgYI
174+
KwYBBQUHMAGGFmh0dHA6Ly8xMjcuMC4wLjE6MjIyMjAwDQYJKoZIhvcNAQELBQAD
175+
ggEBAHfsiTfUNS4k/dLe2ZiHvlKutdT2EzQSLPB4mAef9+R2327rl8cDo+YVbuKU
176+
FmvtWalKEKDMwmF4x/scBEogwfyUxpmwOowvK30VMFPHm3NUb00WpqstilFwHxuO
177+
YAtWi/KUAf2BX3PL7V7MSnHBqRrXxytaZgJ32hDoRUKgfO94/90I9oQvQfUYyaJI
178+
0V22pE0yr4NduWTsQOliOO8b0Y7J6P2z6OGh2hYeJjyCNsuNgGczyjC/kwPInL6i
179+
b6p8diQ9Bpmrp/4S89v9oIq1DcGckLfKfm37/yrD/nyfQejCf0/6S0nEoNC8/Tg0
180+
Iv/Vg3lwf2wwja2T+7h3ATSvzA4=
181+
-----END CERTIFICATE-----
182+
Certificate:
183+
Data:
184+
Version: 3 (0x2)
185+
Serial Number: 99 (0x63)
186+
Signature Algorithm: sha256WithRSAEncryption
187+
Issuer: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL root CA, emailAddress=info@wolfssl.com
188+
Validity
189+
Not Before: Nov 13 20:41:34 2025 GMT
190+
Not After : Aug 9 20:41:34 2028 GMT
191+
Subject: C=US, ST=Washington, L=Seattle, O=wolfSSL, OU=Engineering, CN=wolfSSL root CA, emailAddress=info@wolfssl.com
192+
Subject Public Key Info:
193+
Public Key Algorithm: rsaEncryption
194+
Public-Key: (2048 bit)
195+
Modulus:
196+
00:ab:2c:b4:2f:1d:06:09:ef:4e:29:86:84:7e:cc:
197+
bf:a6:79:7c:f0:c0:c1:64:25:8c:75:b7:10:05:ca:
198+
48:27:0c:0e:32:1c:b0:fe:99:85:39:b6:b9:a2:f7:
199+
27:ff:6d:3c:8c:16:73:29:21:7f:8b:a6:54:71:90:
200+
ad:cc:05:b9:9f:15:c7:0a:3f:5f:69:f4:0a:5f:8c:
201+
71:b5:2c:bf:66:e2:03:9a:32:f4:d2:ec:2a:89:4b:
202+
f9:35:88:14:33:47:4e:2e:05:79:01:ed:64:36:76:
203+
b9:f8:85:cd:01:88:ac:c5:b2:b1:59:b8:cd:5a:f4:
204+
09:09:38:9b:da:5a:cf:ce:78:99:1f:49:3d:41:d6:
205+
06:7c:52:99:c8:97:d1:b3:80:3a:a2:4f:36:c4:c5:
206+
96:30:77:31:38:c8:70:cc:e1:67:06:b3:2b:2f:93:
207+
b5:69:cf:83:7e:88:53:9b:0f:46:21:4c:d6:05:36:
208+
44:99:60:68:47:e5:32:01:12:d4:10:73:ae:9a:34:
209+
94:fa:6e:b8:58:4f:7b:5b:8a:92:97:ad:fd:97:b9:
210+
75:ca:c2:d4:45:7d:17:6b:cd:2f:f3:63:7a:0e:30:
211+
b5:0b:a9:d9:a6:7c:74:60:9d:cc:09:03:43:f1:0f:
212+
90:d3:b7:fe:6c:9f:d9:cd:78:4b:15:ae:8c:5b:f9:
213+
99:81
214+
Exponent: 65537 (0x10001)
215+
X509v3 extensions:
216+
X509v3 Basic Constraints:
217+
CA:TRUE
218+
X509v3 Subject Key Identifier:
219+
73:B0:1C:A4:2F:82:CB:CF:47:A5:38:D7:B0:04:82:3A:7E:72:15:21
220+
X509v3 Authority Key Identifier:
221+
keyid:73:B0:1C:A4:2F:82:CB:CF:47:A5:38:D7:B0:04:82:3A:7E:72:15:21
222+
DirName:/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=wolfSSL root CA/emailAddress=info@wolfssl.com
223+
serial:63
224+
X509v3 Key Usage:
225+
Certificate Sign, CRL Sign
226+
Authority Information Access:
227+
OCSP - URI:http://127.0.0.1:22220
228+
Signature Algorithm: sha256WithRSAEncryption
229+
Signature Value:
230+
58:41:01:e5:1b:ce:bc:51:0c:23:b2:66:df:39:d9:1e:b1:bd:
231+
9a:db:fa:da:16:83:26:6e:7e:2e:f9:5d:46:9a:52:a0:09:6f:
232+
f2:c0:96:ba:49:ad:29:54:06:e9:21:d6:36:5e:d5:43:07:2c:
233+
5d:4e:b7:bf:7c:e5:91:75:ea:0d:56:7c:a3:fd:82:d8:2e:70:
234+
fa:fc:ab:36:36:d5:ba:63:d5:42:da:21:b4:50:9a:86:8a:df:
235+
21:26:03:e8:ca:6f:c7:51:50:6c:cc:40:da:4e:8f:06:15:c0:
236+
9a:0d:7a:80:2c:95:aa:5a:ad:e2:66:b0:32:d6:74:87:ea:7a:
237+
b2:46:d5:2c:cf:fa:18:8a:2f:e0:3a:ae:17:6a:f2:ce:75:8d:
238+
e4:4d:74:8f:e7:c6:21:29:65:5d:41:07:fb:29:d9:be:ea:b2:
239+
e3:80:07:8c:14:8d:a3:7d:d1:51:af:26:9d:cd:01:d5:80:af:
240+
68:12:41:2b:eb:94:cc:45:d1:c7:66:f3:f9:15:72:be:94:e3:
241+
21:6d:f1:08:78:b6:5a:ee:73:09:4b:f4:1a:5e:02:2a:25:f0:
242+
3d:d2:03:f2:22:15:4b:3d:aa:35:ea:90:ca:44:4e:61:77:db:
243+
b4:94:46:77:c6:8c:33:09:b6:84:3c:4e:ac:ad:9d:e0:2f:22:
244+
5a:be:25:19
245+
-----BEGIN CERTIFICATE-----
246+
MIIE5jCCA86gAwIBAgIBYzANBgkqhkiG9w0BAQsFADCBlzELMAkGA1UEBhMCVVMx
247+
EzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoM
248+
B3dvbGZTU0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMRgwFgYDVQQDDA93b2xmU1NM
249+
IHJvb3QgQ0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjUx
250+
MTEzMjA0MTM0WhcNMjgwODA5MjA0MTM0WjCBlzELMAkGA1UEBhMCVVMxEzARBgNV
251+
BAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoMB3dvbGZT
252+
U0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMRgwFgYDVQQDDA93b2xmU1NMIHJvb3Qg
253+
Q0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wggEiMA0GCSqGSIb3
254+
DQEBAQUAA4IBDwAwggEKAoIBAQCrLLQvHQYJ704phoR+zL+meXzwwMFkJYx1txAF
255+
ykgnDA4yHLD+mYU5trmi9yf/bTyMFnMpIX+LplRxkK3MBbmfFccKP19p9ApfjHG1
256+
LL9m4gOaMvTS7CqJS/k1iBQzR04uBXkB7WQ2drn4hc0BiKzFsrFZuM1a9AkJOJva
257+
Ws/OeJkfST1B1gZ8UpnIl9GzgDqiTzbExZYwdzE4yHDM4WcGsysvk7Vpz4N+iFOb
258+
D0YhTNYFNkSZYGhH5TIBEtQQc66aNJT6brhYT3tbipKXrf2XuXXKwtRFfRdrzS/z
259+
Y3oOMLULqdmmfHRgncwJA0PxD5DTt/5sn9nNeEsVroxb+ZmBAgMBAAGjggE5MIIB
260+
NTAMBgNVHRMEBTADAQH/MB0GA1UdDgQWBBRzsBykL4LLz0elONewBII6fnIVITCB
261+
xAYDVR0jBIG8MIG5gBRzsBykL4LLz0elONewBII6fnIVIaGBnaSBmjCBlzELMAkG
262+
A1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUx
263+
EDAOBgNVBAoMB3dvbGZTU0wxFDASBgNVBAsMC0VuZ2luZWVyaW5nMRgwFgYDVQQD
264+
DA93b2xmU1NMIHJvb3QgQ0ExHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5j
265+
b22CAWMwCwYDVR0PBAQDAgEGMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYW
266+
aHR0cDovLzEyNy4wLjAuMToyMjIyMDANBgkqhkiG9w0BAQsFAAOCAQEAWEEB5RvO
267+
vFEMI7Jm3znZHrG9mtv62haDJm5+LvldRppSoAlv8sCWukmtKVQG6SHWNl7VQwcs
268+
XU63v3zlkXXqDVZ8o/2C2C5w+vyrNjbVumPVQtohtFCahorfISYD6Mpvx1FQbMxA
269+
2k6PBhXAmg16gCyVqlqt4mawMtZ0h+p6skbVLM/6GIov4DquF2ryznWN5E10j+fG
270+
ISllXUEH+ynZvuqy44AHjBSNo33RUa8mnc0B1YCvaBJBK+uUzEXRx2bz+RVyvpTj
271+
IW3xCHi2Wu5zCUv0Gl4CKiXwPdID8iIVSz2qNeqQykROYXfbtJRGd8aMMwm2hDxO
272+
rK2d4C8iWr4lGQ==
273+
-----END CERTIFICATE-----

‎certs/ocsp/ocsp-responder-int1-key.der‎

1.19 KB
Binary file not shown.

‎certs/ocsp/ocsp-responder-int1-key.pem‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
-----BEGIN PRIVATE KEY-----
2+
MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCYgvDn2ljPhQuk
3+
3jRBP3la/3V4lcaJXLcuxG0Fc6WxRVhyPiziwBeH/rRkggD9Vn2Kc41viHe7mFao
4+
tig2qAyf1nolHa0QuNAZfIBwnIAmlVNCHJBOJ+31bodvLuuSleBvU/6+F6l/5rcJ
5+
S2OcCJfIszZ1OG0+/9jhInVXGl9gME0bvC+ZfwLv3yQliFeReyxv95iQKZ8SZqk+
6+
c8SBc+ec6yL1bNUj4Hu6psoWozP5LlKjqMnx3YUfwZQLHo+3SL4g0Nq9O4WOksHw
7+
fOwuxSegTiLFwk0bZuesV4w0K6VV6TScfzMp0E7LGhoCF7JFo0kFXQB5hVCRwD0w
8+
y4QKmi1tAgMBAAECggEAExWnocvP+z/x4hKwRU31GK8I+yr66iuA/Mg1wE3leRZt
9+
Z/Zh1YomJ61203D1QL52/UFSfJd+LCp3BautwpEq60GCjWx2QLZvzBCpXe4nlyxu
10+
e8JpSG50t5a6Oe6MKg65RBUltpHtcwTi+LXHZDorDEFo2ihSe2S2tg2C04CIWNfh
11+
CkvSCtth7HmLYtNtQJzjHY7N+I2PQDFW/VxeXBlnVHpyVFqJj3m3t6WFJS9P9Z+J
12+
0VX3iz1UZjdSZec7V0KwIaKQS8+24f2gPIzNM4O488rh6sB8SVZBdHdioDdE3gVv
13+
YuGEVaB1nLqCYKuuzhi5k16n020/OkXL/UdUFy6AIQKBgQDGm0qXuF6xfwW45CVM
14+
cjMG5Q44XRAgfWe3s7N3wzC4ympbd6d/xZuiKKOJuQnHbGMRBwmB7qwjXdsz0hTw
15+
ywC69JwzlCtur3ylfadUsQYhQJOnV2qO15+gnrOVWsJiNFpGRUlyUw3t4mcKbrsn
16+
8VPNj4gKO+6hctkNGfKW+a/iyQKBgQDElZTDR4AgP9N2C2O6TbH585yRklp14Wy5
17+
NP2NwDyFQyLjb4Jo4K3yeBikA+77VSbsTZ84/cPrbs/5nBi4uRYuDY+2GdxH46jB
18+
Ywm60UgkE0FP1YeAhpAoOIktpTDKWTTcablSHMBXkdKF4KZRxftFxC0T5JchwoD6
19+
vT+VPYkDhQKBgQDGI9GkUg0u2cH0trA7d0dPHqA0PSxErbgW/tISropiIZdAT7ys
20+
7ZGakx6s3Q1Tht/C8hlbJqlX02BIb9PycyT0X+uiTbWTBMK/O///r2ilLg7hCYZG
21+
ofogPZR+cgCyBvb1WlSvGQsxhAk20EgpzkrELukTBL3LFpBS0MtEMjB2eQKBgQCi
22+
Ryhqm5d1B7sz8ur8XC7TOvrAYKQ0M0ZhDRFR9qL/DxC51s88bFyrj+AnZOfeqchb
23+
wSfzD+ivbOZaEzWFJ6Tbl25O0MI6xgAExBDAGwsGXK7JjGcy/eH6kdEL0RWZtFIi
24+
sVO+KOXOZB35Th1924U1bmAXz9fCkqGOWrMmK4nzUQKBgCgiCQcgsqpfSIfFknD6
25+
HTHlCV3+tJAeaimw9C9ctxvT6/JlfU/nWQCCi7cAiHp+cYoQmzE7TKAlhdIOgx5Z
26+
MRPoZstFgVHu5VvLRJZEIXBXmGg5hEZilwOUpRXAtC2Nm7yA9J6vrjAyp10jnk+K
27+
NbOQKX7lqmFEo8pmTXqIhwyg
28+
-----END PRIVATE KEY-----

0 commit comments

Comments
 (0)