Forum Discussion
Ray_74718
Nimbostratus
NimbostratusFailed to initialize OCSP Auth Module
Hi all,
I want to implement OCSP Auth with APM to Microsoft PKI.
On-Demany-Cert Auth is working. I don't see any communication in tcpdump to ocsp responder.
Erro Message: 'failed to initial...
Ray_74718Nimbostratus
NimbostratusI tried several variants in the URL of ocsp responder configuration, but all of them don't trigger apm to make a request to ocsp responder. apm is able to resolve the hostname to the correct ip address.
http://1.2.3.4
http://1.2.3.4:80
http://1.2.3.4/ocsp
http://ocsp.example.com
http://ocsp.example.com:80
http://ocsp.example.com/ocsp
Yes, MY-ROOT-CA.pem is the direct issuer of the client certificate. I also compared the hash of MY-ROOT-CA.pem and and issuer_hash in the client certificate and they are identical. Is there a special license for ocsp necessary ?
THX
- Kevin_Stewart
Employee
You need the basic APM license to do OCSP, but not to do OpenSSL from the command line. I strongly urge you to use this tool first. If you can get it to work from the command line, the same settings should apply to APM OCSP.
