<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title><![CDATA[wolfSSL - Embedded SSL Library — ASN signer error with OCSP stapling]]></title>
		<link>https://www.wolfssl.com/forums/topic821-asn-signer-error-with-ocsp-stapling.html</link>
		<atom:link href="https://www.wolfssl.com/forums/feed-rss-topic821.xml" rel="self" type="application/rss+xml" />
		<description><![CDATA[The most recent posts in ASN signer error with OCSP stapling.]]></description>
		<lastBuildDate>Fri, 15 Jul 2016 20:25:05 +0000</lastBuildDate>
		<generator>PunBB</generator>
		<item>
			<title><![CDATA[Re: ASN signer error with OCSP stapling]]></title>
			<link>https://www.wolfssl.com/forums/post2613.html#p2613</link>
			<description><![CDATA[<p>Hi earlenceferns,</p><p>It appears that mozilla.org does not supports the OCSP nonce extension, you can remove it at client.c by replacing:</p><p>wolfSSL_UseOCSPStapling(ssl, WOLFSSL_CSR_OCSP,<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;WOLFSSL_CSR_OCSP_USE_NONCE)</p><p>with:</p><p>wolfSSL_UseOCSPStapling(ssl, WOLFSSL_CSR_OCSP,<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0)</p><p>There was also a bug in the certificate lookup, a fix is in progress for that one. You can track it here:</p><p><a href="https://github.com/wolfSSL/wolfssl/pull/487">https://github.com/wolfSSL/wolfssl/pull/487</a></p>]]></description>
			<author><![CDATA[null@example.com (moises.guimaraes)]]></author>
			<pubDate>Fri, 15 Jul 2016 20:25:05 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post2613.html#p2613</guid>
		</item>
		<item>
			<title><![CDATA[Re: ASN signer error with OCSP stapling]]></title>
			<link>https://www.wolfssl.com/forums/post2600.html#p2600</link>
			<description><![CDATA[<p>Hi Chris</p><p>Why does this have to be OCSP stapling v2? I tried -W 1 but gives another error:</p><p>wolfSSL Entering SSL_new<br />wolfSSL Leaving SSL_new, return 0<br />wolfSSL Entering wolfSSL_CTX_EnableOCSP<br />wolfSSL Entering wolfSSL_CertManagerEnableOCSP<br />wolfSSL Entering InitOCSP<br />wolfSSL Entering SSL_set_fd<br />wolfSSL Leaving SSL_set_fd, return 1<br />wolfSSL Entering SSL_connect()<br />growing output buffer</p><p>wolfSSL Entering SetOcspReqExtensions<br />Shrinking output buffer</p><p>connect state: CLIENT_HELLO_SENT<br />received record layer msg<br />got ALERT!<br />Got alert<br />wolfSSL error occurred, error = 40<br />wolfSSL error occurred, error = -313<br />wolfSSL Entering SSL_get_error<br />wolfSSL Leaving SSL_get_error, return -313<br />wolfSSL Entering ERR_error_string<br />err = -313, revcd alert fatal error<br />wolfSSL error: SSL_connect failed</p>]]></description>
			<author><![CDATA[null@example.com (earlenceferns)]]></author>
			<pubDate>Tue, 12 Jul 2016 21:43:45 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post2600.html#p2600</guid>
		</item>
		<item>
			<title><![CDATA[Re: ASN signer error with OCSP stapling]]></title>
			<link>https://www.wolfssl.com/forums/post2598.html#p2598</link>
			<description><![CDATA[<p>Hi earlenceferns,</p><p>Although not in the example client usage, the &quot;-W&quot; parameter requires an argument.&nbsp; Using your above command, to connect to mozilla.org:443 using OCSP Stapling V2, you would want to do:</p><div class="codebox"><pre><code>$ cd wolfssl-3.9.6
$ ./configure --enable-ocspstapling2
$ make
$ ./examples/client/client -h mozilla.org -p 443 - A DigiCert_High_Assurance_EV_Root_CA.pem -W 2</code></pre></div><p>Best Regards,<br />Chris</p>]]></description>
			<author><![CDATA[null@example.com (chrisc)]]></author>
			<pubDate>Tue, 12 Jul 2016 21:34:41 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post2598.html#p2598</guid>
		</item>
		<item>
			<title><![CDATA[ASN signer error with OCSP stapling]]></title>
			<link>https://www.wolfssl.com/forums/post2594.html#p2594</link>
			<description><![CDATA[<p>I try the foll:</p><p>./examples/client/client&nbsp; -h mozilla.org -p 443 -W&nbsp; -A DigiCert_High_Assurance_EV_Root_CA.pem <br />err = -188, ASN no signer error to confirm failure<br />wolfSSL error: SSL_connect failed</p><br /><p>and I get the above error.<br />When I remove the OCSP stapling part, I get</p><p>./examples/client/client&nbsp; -h mozilla.org -p 443&nbsp; -A DigiCert_High_Assurance_EV_Root_CA.pem <br />SSL version is TLSv1.2<br />SSL cipher suite is TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256<br />Server response: HTTP/1.0 400 Bad request<br />Content-Type: text/html</p><p>&lt;h2&gt;Client sent a bad requ</p><p>which seems like it connected fine. Any idea why OCSP is failing</p>]]></description>
			<author><![CDATA[null@example.com (earlenceferns)]]></author>
			<pubDate>Tue, 12 Jul 2016 21:10:39 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post2594.html#p2594</guid>
		</item>
	</channel>
</rss>
