[openssl-users] generate TLS OCSP responses for a time in the past using -attime not possible?

Jaime Hablutzel Egoavil hablutzel1 at gmail.com
Fri Dec 5 03:02:59 EST 2014


Maybe not an straight answer to your question but go and read the openssl
source code, it is not really hard to understand and you can check all the
supported parameters

Enviado desde mi Android.
El dic 5, 2014 2:03 AM, "Albers, Thorsten" <Thorsten.Albers at vector.com>
escribió:

>  Hi,
>
>
>
> for test purposes I would like to create OCSP responses for a time in the
> past, let’s say for 5 days in the past. In the documentation for the ocsp
> command there is a list of verification options a client might use /
> request.
>
>
>
> I would have expected that a command could look like following:
>
>
>
> openssl ocsp -sha256 -issuer Root_A_cert.cer -cert Sub1_A_cert.cer -reqout
> Sub1_OCSPRequest.bin -text -attime <old timestamp>
>
>
>
> with <old timestamp> being a time in the past.
>
>
>
> But all I get is openssl telling me that the ‘attime’ is no valid
> parameter. Am I doing something wrong, or is this not implemented yet?
>
>
>
> Gruß,
>
> Thorsten
>
>
>
> _______________________________________________
> openssl-users mailing list
> openssl-users at mta.opensslfoundation.net
> https://mta.opensslfoundation.net/mailman/listinfo/openssl-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.opensslfoundation.net/pipermail/openssl-users/attachments/20141205/da279429/attachment.html>


More information about the openssl-users mailing list