Using OCSPClient

Using OCSPClient against CA’s Built-in OCSP Responder

$ OCSPClient \
    -d ~/.dogtag/pki-tomcat/ca/alias \
    -h $HOSTNAME \
    -p 8080 \
    -t /ca/ocsp \
    -c ca_signing \
    --serial 6
CertID.serialNumber=6
CertStatus=Good

See also Configuring Internal OCSP Responder.

Using OCSPClient against OCSP Responder Subsystem ==

Note: Currently the CRL has to be published first from CA to OCSP, otherwise OCSPClient will fail.

$ OCSPClient \
    -d ~/.dogtag/pki-tomcat/ca/alias \
    -h $HOSTNAME \
    -p 8080 \
    -t /ocsp/ee/ocsp \
    -c ca_signing \
    --serial 6
CertID.serialNumber=6
CertStatus=Good

See Also

• RHCS 8.1 - OCSPClient