Home Explore Help
Register Sign In
wareck
/
krackattacks
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Browse Source

tests: Fix "ocsp: Digest must be before -cert or -serial"

When executing ./start.sh with OpenSSL 1.1.0f, an OCSP operation fails.

Put "-sha256" ahead of "-serial" to fix this.

~# openssl version
OpenSSL 1.1.0f  25 May 2017
~# openssl ocsp -reqout /lkp/benchmarks/hwsim/tests/hwsim/logs/current/ocsp-req.der -issuer /lkp/benchmarks/hwsim/tests/hwsim/auth_serv/ca.pem -serial 0xD8D3E3A6CBE3CD12 -no_nonce -sha256
ocsp: Digest must be before -cert or -serial
ocsp: Use -help for summary.
~# openssl ocsp -reqout /lkp/benchmarks/hwsim/tests/hwsim/logs/current/ocsp-req.der -issuer /lkp/benchmarks/hwsim/tests/hwsim/auth_serv/ca.pem -sha256 -serial 0xD8D3E3A6CBE3CD12 -no_nonce

Signed-off-by: leishaoting <leist.fnst@cn.fujitsu.com>
leishaoting 7 years ago
parent
9596a75652
commit
481d88c060
1 changed files with 1 additions and 1 deletions
Unified View Show Diff Stats
  1. 1 1
      tests/hwsim/start.sh

+ 1 - 1
tests/hwsim/start.sh
View File 

@@ -165,7 +165,7 @@ for i in unknown revoked; do
 
 done
 
 done
 
 
 
 openssl ocsp -reqout $LOGDIR/ocsp-req.der -issuer $DIR/auth_serv/ca.pem \
 
 openssl ocsp -reqout $LOGDIR/ocsp-req.der -issuer $DIR/auth_serv/ca.pem \
 
-    -serial 0xD8D3E3A6CBE3CD12 -no_nonce -sha256 >> $LOGDIR/ocsp.log 2>&1
 
+    -sha256 -serial 0xD8D3E3A6CBE3CD12 -no_nonce >> $LOGDIR/ocsp.log 2>&1
 
 for i in "" "-unknown" "-revoked"; do
 
 for i in "" "-unknown" "-revoked"; do
 
     openssl ocsp -index $DIR/auth_serv/index$i.txt \
 
     openssl ocsp -index $DIR/auth_serv/index$i.txt \
 
 	-rsigner $DIR/auth_serv/ca.pem \
 
 	-rsigner $DIR/auth_serv/ca.pem \