[Eisfair] [E1] certs: update revocation-list Fehlermeldung

Juergen Edner juergen at eisfair.org
Fr Nov 22 11:05:34 CET 2019


Hallo Rolf,

> ibs-server # /var/install/bin/certs-show-chain
> comodo_rsa_domain_validation_secure_server_ca.pem
> 
> *
> | certificate : comodo_rsa_domain_validation_secure_server_ca.pem
> (8d28ae65)
> | subject     : C = GB ST = Greater Manchester L = Salford O = COMODO CA
> Limited CN = COMODO RSA Domain Validat
> | issuer      : C = GB ST = Greater Manchester L = Salford O = COMODO CA
> Limited CN = COMODO RSA Certification
> | MD5 f-print : 83:E1:04:65:B7:22:EF:33:FF:0B:6F:53:5E:8D:99:6B
> | SHA1 f-print: 33:9C:DD:57:CF:D5:B1:41:16:9B:61:5F:F3:14:28:78:2D:1D:A6:39
> |
> +->| certificate : comodo_rsa_certification_authority.pem (d6325660)
>    | subject     : C = GB ST = Greater Manchester L = Salford O = COMODO
> CA Limited CN = COMODO RSA Certificati
>    | issuer      : C = SE O = AddTrust AB OU = AddTrust External TTP
> Network CN = AddTrust External CA Root
>    | MD5 f-print : 1E:DA:F9:AE:99:CE:29:20:66:7D:0E:9A:8B:3F:8C:9C
>    | SHA1 f-print:
> F5:AD:0B:CC:1A:D5:6C:D1:50:72:5B:1C:86:6C:30:AD:92:EF:21:B0
>    |
>    +->| certificate : AddTrust_External_Root.pem (157753a5)
>       | subject     : C = SE O = AddTrust AB OU = AddTrust External TTP
> Network CN = AddTrust External CA Root
>       | issuer      : C = SE O = AddTrust AB OU = AddTrust External TTP
> Network CN = AddTrust External CA Root
>       | MD5 f-print : 1D:35:54:04:85:78:B0:3F:42:42:4D:BF:20:73:0A:3F
>       | SHA1 f-print:
> 02:FA:F3:E2:91:43:54:68:60:78:57:69:4D:F5:E4:5B:68:85:18:68
>       |
>       +-> end of chain!
> 
> checking certificate chain:
> * OCSP Response verify OK (cache)
>   comodo_rsa_domain_validation_secure_server_ca.pem: good
>     This Update: Nov 16 21:39:03 2019 GMT
>     Next Update: Nov 23 21:39:03 2019 GMT

Ok, dies sieht schon einmal gut aus. Besonders der letzte Teil der
OCSP-Anwort hat mich hier interessiert. Denn diese Prüfung zeigt mir,
dass eine OCSP-Anfrage erfolgreich durchgeführt wurde.

Gruß Jürgen

-- 
Mail: juergen at eisfair.org


Mehr Informationen über die Mailingliste Eisfair