[Pki-users] OCSP reply logging

Remy van Elst relst at relst.nl
Thu Aug 8 03:41:45 UTC 2013


Hello,

Is it possible to have the ocsp subsystem log the status part (good, unkown etc.) of the replies it sents out? I've got it configured correctly and the responses it gives are as expected. However in transaction.log I can see that it replies, but not the status of the reply (and the certificate it replies to), and with debug logging turned on I have a multi-line ocsp response in a log file, and I don't feel like parsing that.

Is there a (preferably simple) way to let the ocsp responder log the certificate, the status of that certificate and the requesting entity (for example by IP) in a plain-text format?

-- 
Remy van Elst
https://raymii.org - https://sparklingnetwork.nl
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20130808/4ebd0d00/attachment.htm>


More information about the Pki-users mailing list