5.5. Verify Your OCSP Configuration
You can use the OpenSSL command-line tool to verify your configuration:
# openssl ocsp -issuer cacert.crt -cert client.cert -url http://HOST:PORT -CA ocsp_ca.cert -VAfile ocsp.cert
-issuer
is the Certificate Authority certificate.-cert
is the Client certificate which you want to verify.-url
is the http server validating Certificate (OCSP).-CA
is the CA certificate for verifying the Apache HTTP Server server certificate.-VAfile
is the OCSP Responder certificate.