vasco/FSI
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tls_serial_0

Browse Source
This commit is contained in:
Vasco
2026-04-22 00:15:32 +01:00
parent 30937e1fcc
commit 0e21c22502
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
conf/ocsp-verify.sh
View File

@@ -5,9 +5,9 @@ depth=$1
# Only check client certificate (depth 0) # Only check client certificate (depth 0)
env >> /etc/openvpn/server/ocsp_env.log env >> /etc/openvpn/server/ocsp_env.log
if [ "$depth" -eq 0 ]; then if [ "$depth" -eq 0 ]; then
echo "Checking OCSP for peer_cert=$peer_cert" >> /etc/openvpn/server/ocsp.log echo "Checking OCSP for serial=$tls_serial_0" >> /etc/openvpn/server/ocsp.log
if [ -n "$peer_cert" ]; then if [ -n "$tls_serial_0" ]; then
status=$(openssl ocsp -issuer /etc/openvpn/server/ca.crt -cert "$peer_cert" -url http://10.60.0.1:8888 -CAfile /etc/openvpn/server/ca.crt 2>>/etc/openvpn/server/ocsp.log) status=$(openssl ocsp -issuer /etc/openvpn/server/ca.crt -serial "0x$tls_serial_0" -url http://10.60.0.1:8888 -CAfile /etc/openvpn/server/ca.crt 2>>/etc/openvpn/server/ocsp.log)
echo "OCSP Status: $status" >> /etc/openvpn/server/ocsp.log echo "OCSP Status: $status" >> /etc/openvpn/server/ocsp.log
if echo "$status" | grep -q "revoked"; then if echo "$status" | grep -q "revoked"; then
@@ -23,7 +23,7 @@ if [ "$depth" -eq 0 ]; then
echo "Result: UNKNOWN/ERROR" >> /etc/openvpn/server/ocsp.log echo "Result: UNKNOWN/ERROR" >> /etc/openvpn/server/ocsp.log
exit 1 exit 1
else else
echo "peer_cert is empty!" >> /etc/openvpn/server/ocsp.log echo "tls_serial_0 is empty!" >> /etc/openvpn/server/ocsp.log
exit 1 exit 1
fi fi
fi fi