Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiple OCSP responder #72

Closed
kroomagnon opened this issue Jan 19, 2018 · 2 comments
Closed

Multiple OCSP responder #72

kroomagnon opened this issue Jan 19, 2018 · 2 comments
Assignees
Labels

Comments

@kroomagnon
Copy link

Hi,

I found that check_ssl_cert fails with multiple ocsp responders:

check_ssl_cert --debug --host netlock.hu
[DBG] OCSP: host = ocsp1.netlock.hu
ocsp2.netlock.hu
ocsp3.netlock.hu

I can fix it with addition of "head -n1", but I don't think it's the best way:

OCSP_URI="$($OPENSSL ${OPENSSL_COMMAND} ${OPENSSL_PARAMS} -in "${CERT}" -ocsp_uri -noout | head -n1)"
@matteocorti matteocorti self-assigned this Jan 19, 2018
@matteocorti
Copy link
Owner

I will write a quick fix as suggested. A loop over all the hosts would be better: I'll put it in the to do list.

@dilyanpalauzov
Copy link
Contributor

The ./TODO file contains:
* Loop over all the provided OCSP hosts (https://github.com/matteocorti/check_ssl_cert/issues/72)

Is this now implemented and can be removed from the TODO?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants