xref: /freebsd/crypto/openssl/demos/certs/ocspquery.sh (revision e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6)
1*e0c4386eSCy Schubert# Example querying OpenSSL test responder. Assumes ocsprun.sh has been
2*e0c4386eSCy Schubert# called.
3*e0c4386eSCy Schubert
4*e0c4386eSCy SchubertOPENSSL=../../apps/openssl
5*e0c4386eSCy SchubertOPENSSL_CONF=../../apps/openssl.cnf
6*e0c4386eSCy Schubertexport OPENSSL_CONF
7*e0c4386eSCy Schubert
8*e0c4386eSCy Schubert# Send responder queries for each certificate.
9*e0c4386eSCy Schubert
10*e0c4386eSCy Schubertecho "Requesting OCSP status for each certificate"
11*e0c4386eSCy Schubert$OPENSSL ocsp -issuer intca.pem -cert client.pem -CAfile root.pem \
12*e0c4386eSCy Schubert			-url http://127.0.0.1:8888/
13*e0c4386eSCy Schubert$OPENSSL ocsp -issuer intca.pem -cert server.pem -CAfile root.pem \
14*e0c4386eSCy Schubert			-url http://127.0.0.1:8888/
15*e0c4386eSCy Schubert$OPENSSL ocsp -issuer intca.pem -cert rev.pem -CAfile root.pem \
16*e0c4386eSCy Schubert			-url http://127.0.0.1:8888/
17*e0c4386eSCy Schubert# One query for all three certificates.
18*e0c4386eSCy Schubertecho "Requesting OCSP status for three certificates in one request"
19*e0c4386eSCy Schubert$OPENSSL ocsp -issuer intca.pem \
20*e0c4386eSCy Schubert	-cert client.pem -cert server.pem -cert rev.pem \
21*e0c4386eSCy Schubert	-CAfile root.pem -url http://127.0.0.1:8888/
22