10.4. Verify the configuration
You can use OpenSSL to verify your configuration.
# openssl ocsp -issuer cacert.crt -cert client.cert -url http://HOST:PORT -CA ocsp_ca.cert -VAfile ocsp.cert
Note
-issuer
is the Certificate Authority certificate.-cert
is the Client certificate which you want to verify.-url
is the http server validating Certificate (OCSP).-CA
is the CA certificate for verifying the httpd server certificate.-VAfile
is the OCSP Responder certificate.