Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Responder Error: internalerror (2) #25

Open
AndreiBrajnicov opened this issue Feb 15, 2017 · 1 comment
Open

Responder Error: internalerror (2) #25

AndreiBrajnicov opened this issue Feb 15, 2017 · 1 comment

Comments

@AndreiBrajnicov
Copy link

AndreiBrajnicov commented Feb 15, 2017

Hello.

Right now I'm unable to retrieve a valid ocspd response using sha2 dighest algorightm and latest available version of openca-ocspd ( v3.1.2 )

Request was performed using openssl ocsp command. Every time I'm receiving such error:
Responder Error: internalerror (2)

In the ocspd logs I see this error:

Feb 15 07:40:23 2017 GMT [12503] INFO: Connection from [192.168.99.1]
Feb 15 07:40:23 2017 GMT [12503] INFO: [http_s.c:404] [DEBUG] HTTP Content-Length: 148 bytes
Feb 15 07:40:23 2017 GMT [12503] INFO: Request for certificate serial <censored>
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:692] [DEBUG] CRL::CA [emtrust] nameHash OK
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:707] [DEBUG] CRL::CA [emtrust] issuerKeyHash OK
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:329] [DEBUG] Using the specific token for the found CA (ocspServerToken2)
Feb 15 07:40:23 2017 GMT [12503] INFO: valid certificate status [serial <censored>]
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:85] [DEBUG] Digest Algorithm For Signature: SHA256
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:98] [DEBUG] Signing Certificate:
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:99] [DEBUG] - Serial .....: <censored>
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:100] [DEBUG] - Subject ....: <censored>
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:101] [DEBUG] - Issuer .....: <censored>
Feb 15 07:40:23 2017 GMT [12503] ERROR: [pki_ocsp_resp.c:293] Can not sign OCSP response => error:00000000:lib(0):func(0):reason(0)
Feb 15 07:40:23 2017 GMT [12503] ERROR: [response.c:117] [ERROR] Failed while signing [error:00000000:lib(0):func(0):reason(0)]
Feb 15 07:40:23 2017 GMT [12503] INFO: [response.c:630] [DEBUG] OCSP Response Bytes = 5, HTTP Header Bytes = 181

But for some reasons it works for version v2.4.2 using the same config and same certificates.

I've treid to compile and build it on Centos7 and Ubuntu16.04

@aGUID
Copy link

aGUID commented Feb 24, 2017

Confirm.
I had same error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants