openssl-1.0.0d/apps/ocsp.c

169 	if (bio_err == NULL) bio_err = BIO_new_fp(stderr, BIO_NOCLOSE);
171 	if (!load_config(bio_err, NULL))
197 					BIO_printf(bio_err,
212 					BIO_printf(bio_err, "Error parsing URL\n");
364 					BIO_printf(bio_err,
380 					BIO_printf(bio_err,
430 				issuer = load_cert(bio_err, *args, FORMAT_PEM,
442 				cert = load_cert(bio_err, *args, FORMAT_PEM,
492 					BIO_printf(bio_err,
510 					BIO_printf(bio_err,
526 					BIO_printf(bio_err,
573 		BIO_printf (bio_err, "OCSP utility\n");
574 		BIO_printf (bio_err, "Usage ocsp [options]\n");
575 		BIO_printf (bio_err, "where options are\n");
576 		BIO_printf (bio_err, "-out file          output filename\n");
577 		BIO_printf (bio_err, "-issuer file       issuer certificate\n");
578 		BIO_printf (bio_err, "-cert file         certificate to check\n");
579 		BIO_printf (bio_err, "-serial n          serial number to check\n");
580 		BIO_printf (bio_err, "-signer file       certificate to sign OCSP request with\n");
581 		BIO_printf (bio_err, "-signkey file      private key to sign OCSP request with\n");
582 		BIO_printf (bio_err, "-sign_other file   additional certificates to include in signed request\n");
583 		BIO_printf (bio_err, "-no_certs          don't include any certificates in signed request\n");
584 		BIO_printf (bio_err, "-req_text          print text form of request\n");
585 		BIO_printf (bio_err, "-resp_text         print text form of response\n");
586 		BIO_printf (bio_err, "-text              print text form of request and response\n");
587 		BIO_printf (bio_err, "-reqout file       write DER encoded OCSP request to \"file\"\n");
588 		BIO_printf (bio_err, "-respout file      write DER encoded OCSP reponse to \"file\"\n");
589 		BIO_printf (bio_err, "-reqin file        read DER encoded OCSP request from \"file\"\n");
590 		BIO_printf (bio_err, "-respin file       read DER encoded OCSP reponse from \"file\"\n");
591 		BIO_printf (bio_err, "-nonce             add OCSP nonce to request\n");
592 		BIO_printf (bio_err, "-no_nonce          don't add OCSP nonce to request\n");
593 		BIO_printf (bio_err, "-url URL           OCSP responder URL\n");
594 		BIO_printf (bio_err, "-host host:n       send OCSP request to host on port n\n");
595 		BIO_printf (bio_err, "-path              path to use in OCSP request\n");
596 		BIO_printf (bio_err, "-CApath dir        trusted certificates directory\n");
597 		BIO_printf (bio_err, "-CAfile file       trusted certificates file\n");
598 		BIO_printf (bio_err, "-VAfile file       validator certificates file\n");
599 		BIO_printf (bio_err, "-validity_period n maximum validity discrepancy in seconds\n");
600 		BIO_printf (bio_err, "-status_age n      maximum status age in seconds\n");
601 		BIO_printf (bio_err, "-noverify          don't verify response at all\n");
602 		BIO_printf (bio_err, "-verify_other file additional certificates to search for signer\n");
603 		BIO_printf (bio_err, "-trust_other       don't verify additional certificates\n");
604 		BIO_printf (bio_err, "-no_intern         don't search certificates contained in response for signer\n");
605 		BIO_printf (bio_err, "-no_signature_verify don't check signature on response\n");
606 		BIO_printf (bio_err, "-no_cert_verify    don't check signing certificate\n");
607 		BIO_printf (bio_err, "-no_chain          don't chain verify response\n");
608 		BIO_printf (bio_err, "-no_cert_checks    don't do additional checks on signing certificate\n");
609 		BIO_printf (bio_err, "-port num		 port to run responder on\n");
610 		BIO_printf (bio_err, "-index file	 certificate status index file\n");
611 		BIO_printf (bio_err, "-CA file		 CA certificate\n");
612 		BIO_printf (bio_err, "-rsigner file	 responder certificate to sign responses with\n");
613 		BIO_printf (bio_err, "-rkey file	 responder key to sign responses with\n");
614 		BIO_printf (bio_err, "-rother file	 other certificates to include in response\n");
615 		BIO_printf (bio_err, "-resp_no_certs     don't include any certificates in response\n");
616 		BIO_printf (bio_err, "-nmin n	 	 number of minutes before next update\n");
617 		BIO_printf (bio_err, "-ndays n	 	 number of days before next update\n");
618 		BIO_printf (bio_err, "-resp_key_id       identify reponse by signing certificate key ID\n");
619 		BIO_printf (bio_err, "-nrequest n        number of requests to accept (default unlimited)\n");
620 		BIO_printf (bio_err, "-<dgst alg>     use specified digest in the request");
629 		BIO_printf(bio_err, "Error opening output file\n");
640 			BIO_printf(bio_err, "Error Opening OCSP request file\n");
647 			BIO_printf(bio_err, "Error reading OCSP request\n");
662 		rsigner = load_cert(bio_err, rsignfile, FORMAT_PEM,
666 			BIO_printf(bio_err, "Error loading responder certificate\n");
669 		rca_cert = load_cert(bio_err, rca_filename, FORMAT_PEM,
673 			rother = load_certs(bio_err, rcertfile, FORMAT_PEM,
677 		rkey = load_key(bio_err, rkeyfile, FORMAT_PEM, 0, NULL, NULL,
683 		BIO_printf(bio_err, "Waiting for OCSP client connections...\n");
701 		BIO_printf(bio_err, "Need an OCSP request for this operation!\n");
710 		signer = load_cert(bio_err, signfile, FORMAT_PEM,
714 			BIO_printf(bio_err, "Error loading signer certificate\n");
719 			sign_other = load_certs(bio_err, sign_certfile, FORMAT_PEM,
723 		key = load_key(bio_err, keyfile, FORMAT_PEM, 0, NULL, NULL,
730 			BIO_printf(bio_err, "Error signing OCSP request\n");
742 			BIO_printf(bio_err, "Error opening file %s\n", reqout);
751 		BIO_printf(bio_err, "Need a responder certificate, key and CA for this operation!\n");
771 		resp = process_responder(bio_err, req, host, path,
776 		BIO_printf(bio_err, "Error creating connect BIO - sockets not supported.\n");
785 			BIO_printf(bio_err, "Error Opening OCSP response file\n");
792 			BIO_printf(bio_err, "Error reading OCSP response\n");
810 			BIO_printf(bio_err, "Error opening file %s\n", respout);
851 		store = setup_verify(bio_err, CAfile, CApath);
856 		verify_other = load_certs(bio_err, verify_certfile, FORMAT_PEM,
865 		BIO_printf(bio_err, "Error parsing response\n");
874 				BIO_printf(bio_err, "WARNING: no nonce in response\n");
877 				BIO_printf(bio_err, "Nonce Verify error\n");
887 			BIO_printf(bio_err, "Response Verify Failure\n");
888 			ERR_print_errors(bio_err);
891 			BIO_printf(bio_err, "Response verify OK\n");
901 	ERR_print_errors(bio_err);
939 		BIO_printf(bio_err, "No issuer certificate specified\n");
950 	BIO_printf(bio_err, "Error Creating OCSP request\n");
963 		BIO_printf(bio_err, "No issuer certificate specified\n");
973 		BIO_printf(bio_err, "Error converting serial number %s\n", serial);
983 	BIO_printf(bio_err, "Error Creating OCSP request\n");
1188 	BIO_printf(bio_err, "Error setting up accept BIO - sockets not supported.\n");
1197 			BIO_printf(bio_err, "Error setting up accept BIO\n");
1198 			ERR_print_errors(bio_err);
1219 			BIO_printf(bio_err, "Error accepting connection\n");
1220 			ERR_print_errors(bio_err);
1237 				BIO_printf(bio_err, "Invalid request\n");
1253 		BIO_printf(bio_err, "Error parsing OCSP request\n");
1254 		ERR_print_errors(bio_err);
1412 		BIO_printf(bio_err, "Error querying OCSP responsder\n");