MS OCSP Responder for multiple CAs RRS feed

  • Question

  • Hey. Setting up an OCSP responder with multiple revocation configurations. Check. Trying to test it using openssl ocsp, but the -issuer parameter does not work if there are multiple revocation configurations. The CA file is fine being a bundle with the Root certs of both CAs. It only works when the issuer is the first cert. If I flip them around, then it works for the other configuration. Is there no way to support multiple issuers for multiple CAs with a single issuer file? Thanks.
    Tuesday, April 4, 2017 6:47 PM

All replies