generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Submitted by: Victor B. Wagner <vitus@cryptocom.ru>, steve

Browse Source 
Use default algorithms for OCSP request and response signing. New command
line option to support other digest use for OCSP certificate IDs.
This commit is contained in:
Dr. Stephen Henson
2007-12-04 12:41:28 +00:00
parent 28f7e60d47
commit cec2538ca9
4 changed files with 28 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
doc/apps/ocsp.pod
View File

@@ -51,6 +51,7 @@ B<openssl> B<ocsp>
[B<-ndays n>]
[B<-resp_key_id>]
[B<-nrequest n>]
[B<-md5|-sha1|...>]
=head1 DESCRIPTION
@@ -206,6 +207,11 @@ information is immediately available. In this case the age of the B<notBefore> f
is checked to see it is not older than B<age> seconds old. By default this additional
check is not performed.
=item B<-md5|-sha1|-sha256|-ripemod160|...>
this option sets digest algorithm to use for certificate identification
in the OCSP request. By default SHA-1 is used.
=back
=head1 OCSP SERVER OPTIONS