5.5. Verify Your OCSP Configuration
You can use the OpenSSL command-line tool to verify your configuration:
openssl ocsp -issuer cacert.crt -cert client.cert -url http://HOST:PORT -CA ocsp_ca.cert -VAfile ocsp.cert
# openssl ocsp -issuer cacert.crt -cert client.cert -url http://HOST:PORT -CA ocsp_ca.cert -VAfile ocsp.cert
-issueris the Certificate Authority certificate.-certis the Client certificate which you want to verify.-urlis the http server validating Certificate (OCSP).-CAis the CA certificate for verifying the Apache HTTP Server server certificate.-VAfileis the OCSP Responder certificate.