Unable to use OCSP responder in KCA 6 on Solaris 8
Originally Published: 2002-10-15
Article Number
Applies To
Sun Solaris 2.8
OCSP
Issue
- <LOG_DATA>
- <![CDATA[ OCSP Transaction: TimeOfOCSPRequest(GMT):Tue Mar 12 14:21:28 2002|OCSPPort:80|ResponseStatus:XrcBADSYNTAX| ]]>
</LOG_DATA>
KCA 6.0.1 is installed on the Solaris 8 platform. The CA is correctly configured to respond to OCSP requests from third party clients. However, against some clients such as Valicert Validator for Apache or Lexign Prosigner (ex Elock), the OCSP handshake and the following error message is included in the KCA audit log:
- <LOG_DATA>
- <![CDATA[ OCSP Transaction: TimeOfOCSPRequest(GMT):Tue Mar 12 14:21:28 2002|OCSPPort:80|ResponseStatus:XrcBADSYNTAX| ]]>
</LOG_DATA>
Previous versions of KCA worked without any problems with these OCSP clients.
Resolution
Related Articles
Which hashing algorithm is used by the OCSP responder in KCA 6.5.1 and Validation Manager? 8Number of Views How to Install and Configure the RSA PAM Agent on Solaris Operating System with RSA Authentication Manager. 319Number of Views Unable to remove Invalidity Date Extension for CRLs issued against a CA in KCA 6.5.1 4Number of Views How to use new keypairs/certificates for the servers in KCA? 10Number of Views Upgrade issue from RCM 6.7 on Solaris to RCM 6.8 on Windows 20Number of Views
Trending Articles
Don't see what you're looking for?