Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OCSPD Revoked Certificate Response Error #56

Open
scottthomas007 opened this issue Jun 6, 2021 · 1 comment
Open

OCSPD Revoked Certificate Response Error #56

scottthomas007 opened this issue Jun 6, 2021 · 1 comment

Comments

@scottthomas007
Copy link

Hi,

I am using OpenCA's OCSP Responder - v3.1.2 on Debian 10.8.0.
I am having an issue that the revoked certificate request gives "Responder Error: internalerror (2)"
When i digged into the logs of the OCSPD, i found that in case of revoked certificate, only the following log is sent:

Jun 2 13:28:43 ocsp1 ocspd[1692]: Connection from [127.0.0.1]
Jun 2 13:28:43 ocsp1 ocspd[1692]: Request for certificate serial 160552354204550473679962
Jun 2 13:28:43 ocsp1 ocspd[1692]: [response.c:761] [OCSPD_CA_ENTRY_find()] [DEBUG] CRL::CA [MySelf] nameHash OK
Jun 2 13:28:43 ocsp1 ocspd[1692]: [response.c:777] [OCSPD_CA_ENTRY_find()] [DEBUG] CRL::CA [MySelf] issuerKeyHash OK
Jun 2 13:28:43 ocsp1 ocspd[1692]: [response.c:701] [ocspd_resp_send_socket()] [DEBUG] OCSP Response Bytes = 5, HTTP Header Bytes = 181

@scottthomas007
Copy link
Author

The log file contains the following error:

Jun 2 13:34:29 ocsp1 ocspd[1020]: [pki_ocsp_resp.c:201] [PKI_X509_OCSP_RESP_add()] [ERROR] Can not create basic entry!
Jun 2 13:34:29 ocsp1 ocspd[1020]: [response.c:464] [make_ocsp_response()] [ERROR] Can not add a simple resp into the OCSP response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant