Tobias Brunner
c10a13589e
The only exception is the ikev2/ocsp-no-signer-cert scenario as the pki command won't sign an OCSP response with a certificate that isn't the CA certificate or marked as an OCSP signer.
10 lines
221 B
Bash
Executable File
10 lines
221 B
Bash
Executable File
#!/bin/bash
|
|
|
|
cd /etc/ca
|
|
|
|
echo "Content-type: application/ocsp-response"
|
|
echo ""
|
|
|
|
cat | pki --ocsp --respond --cacert strongswanCert.pem --index index.txt \
|
|
--cert ocspCert.pem --key ocspKey.pem --lifetime 5 --debug 0
|