Red Hat Training

A Red Hat training course is available for Red Hat JBoss Web Server

5.5. Verify Your OCSP Configuration

You can use the OpenSSL command-line tool to verify your configuration:
# openssl ocsp -issuer cacert.crt -cert client.cert -url http://HOST:PORT -CA ocsp_ca.cert -VAfile ocsp.cert
  • -issuer is the Certificate Authority certificate.
  • -cert is the Client certificate which you want to verify.
  • -url is the http server validating Certificate (OCSP).
  • -CA is the CA certificate for verifying the Apache HTTP Server server certificate.
  • -VAfile is the OCSP Responder certificate.