#start ocsp server here
nic #
 ../../guestbin/ocspd.sh --start
 cp /testing/x509/real/mainca/nic.end.key /etc/ocspd/private/nic_key.pem
 cp /testing/x509/real/mainca/nic.end.cert /etc/ocspd/certs/nic.pem
 cp /testing/x509/real/mainca/root.cert /etc/ocspd/certs/mainca.pem
 cp /testing/x509/ocspd.conf /etc/ocspd/ocspd.conf
 openssl crl -inform DER -in /testing/x509/real/mainca/crl-is-up-to-date.crl -outform PEM -out /etc/ocspd/crls/revoked_crl.pem
 restorecon -R /etc/ocspd
 ocspd -v -d -c /etc/ocspd/ocspd.conf
nic #
 echo "done."
done.
nic #
 ../../guestbin/ocspd.sh --log
INFO::CORE::Connection from [192.1.2.23]
ERROR::No Content-Length in REQ Headers
ERROR::Can not parse REQ
INFO::CORE::Connection from [192.1.2.23]
request for certificate serial <NIC>
status VALID for <NIC>
INFO::CORE::Connection from [192.1.2.23]
request for certificate serial <REVOKED>
Status for <REVOKED> is REVOKED
nic #
 # this test should log that west's certificate is revoked
nic #
 grep -i -e "^[^|].*SEC_ERROR" /tmp/pluto.log
grep: /tmp/pluto.log: No such file or directory
nic #
 
