testing: Use a single OCSP responder for ikev2-multi-ca/ocsp-signers scenario
This demonstrates the multi-CA capabilities of the pki --ocsp command.
This commit is contained in:
@@ -56,11 +56,11 @@ authorities {
|
|||||||
|
|
||||||
research {
|
research {
|
||||||
cacert = researchCert.pem
|
cacert = researchCert.pem
|
||||||
ocsp_uris = http://ocsp.strongswan.org:8881
|
ocsp_uris = http://ocsp.strongswan.org:8880
|
||||||
}
|
}
|
||||||
|
|
||||||
sales {
|
sales {
|
||||||
cacert = salesCert.pem
|
cacert = salesCert.pem
|
||||||
ocsp_uris = http://ocsp.strongswan.org:8882
|
ocsp_uris = http://ocsp.strongswan.org:8880
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -0,0 +1,15 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
cd /etc/ca
|
||||||
|
|
||||||
|
echo "Content-type: application/ocsp-response"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
cat | pki --ocsp --respond \
|
||||||
|
--cacert strongswanCert.pem --index index.txt \
|
||||||
|
--cert ocspCert.pem --key ocspKey.pem \
|
||||||
|
--cacert research/researchCert.pem --index research/index.txt \
|
||||||
|
--cert research/ocspCert.pem --key research/ocspKey.pem \
|
||||||
|
--cacert sales/salesCert.pem --index sales/index.txt \
|
||||||
|
--cert sales/ocspCert.pem --key sales/ocspKey.pem \
|
||||||
|
--lifetime 5 --debug 0
|
||||||
Reference in New Issue
Block a user