From f49d84e17a4fc041fbe23563ffb1ef3e96aa77d0 Mon Sep 17 00:00:00 2001 From: JacobBarthelmeh Date: Thu, 8 Sep 2022 09:02:31 -0700 Subject: [PATCH] fix typo and pipe ocsp response creation to /dev/null --- certs/ocsp/renewcerts.sh | 6 +++--- wolfcrypt/src/asn.c | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/certs/ocsp/renewcerts.sh b/certs/ocsp/renewcerts.sh index 4248d171e..479b3ef07 100755 --- a/certs/ocsp/renewcerts.sh +++ b/certs/ocsp/renewcerts.sh @@ -85,8 +85,8 @@ update_cert server5 "www5.wolfssl.com" intermediate3-ca openssl ocsp -port 22221 -ndays 1000 -index index-ca-and-intermediate-cas.txt -rsigner ocsp-responder-cert.pem -rkey ocsp-responder-key.pem -CA root-ca-cert.pem & PID=$! -openssl ocsp -issuer ./root-ca-cert.pem -cert ./intermediate1-ca-cert.pem -url http://localhost:22221/ -respout test-response.der -openssl ocsp -issuer ./root-ca-cert.pem -cert ./intermediate1-ca-cert.pem -url http://localhost:22221/ -respout test-response-nointern.der -no_intern +openssl ocsp -issuer ./root-ca-cert.pem -cert ./intermediate1-ca-cert.pem -url http://localhost:22221/ -respout test-response.der &> /dev/null +openssl ocsp -issuer ./root-ca-cert.pem -cert ./intermediate1-ca-cert.pem -url http://localhost:22221/ -respout test-response-nointern.der -no_intern &> /dev/null kill $PID wait $PID @@ -95,7 +95,7 @@ wait $PID openssl ocsp -port 22221 -ndays 1000 -index index-ca-and-intermediate-cas.txt -rsigner ocsp-responder-cert.pem -rkey ocsp-responder-key.pem -CA root-ca-cert.pem -rsigopt rsa_padding_mode:pss & PID=$! -openssl ocsp -issuer ./root-ca-cert.pem -cert ./intermediate1-ca-cert.pem -url http://localhost:22221/ -respout test-response-rsapss.der +openssl ocsp -issuer ./root-ca-cert.pem -cert ./intermediate1-ca-cert.pem -url http://localhost:22221/ -respout test-response-rsapss.der &> /dev/null # can verify with the following command # openssl ocsp -respin test-response-nointern.der -CAfile root-ca-cert.pem -issuer intermediate1-ca-cert.pem diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c index 65dcc7bef..68156daa4 100644 --- a/wolfcrypt/src/asn.c +++ b/wolfcrypt/src/asn.c @@ -33649,7 +33649,7 @@ static int DecodeBasicOcspResponse(byte* source, word32* ioIndex, } } #ifdef WC_RSA_PSS - if (ret == 0 && (dataASN[X509CERTASN_IDX_SIGALGO_PARAMS].tag != 0)) { + if (ret == 0 && (dataASN[OCSPBASICRESPASN_IDX_SIGNATURE_PARAMS].tag != 0)) { sigParams = GetASNItem_Addr( dataASN[OCSPBASICRESPASN_IDX_SIGNATURE_PARAMS], source);