From 4bac977a45c0ddc2639d520984f6f69be7ddaa26 Mon Sep 17 00:00:00 2001 From: Vasco Date: Wed, 22 Apr 2026 00:19:36 +0100 Subject: [PATCH] fixed the fix???? --- conf/ocsp-verify.sh | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/conf/ocsp-verify.sh b/conf/ocsp-verify.sh index 427fa63..0e382da 100755 --- a/conf/ocsp-verify.sh +++ b/conf/ocsp-verify.sh @@ -7,7 +7,9 @@ env >> /etc/openvpn/server/ocsp_env.log if [ "$depth" -eq 0 ]; then echo "Checking OCSP for serial=$tls_serial_0" >> /etc/openvpn/server/ocsp.log if [ -n "$tls_serial_0" ]; then - status=$(openssl ocsp -issuer /etc/openvpn/server/ca.crt -serial "0x$tls_serial_0" -url http://10.60.0.1:8888 -CAfile /etc/openvpn/server/ca.crt 2>>/etc/openvpn/server/ocsp.log) + # OpenVPN exports tls_serial_0 as decimal, OpenSSL expects hex + hex_serial=$(printf '%x' "$tls_serial_0") + status=$(openssl ocsp -issuer /etc/openvpn/server/ca.crt -serial "0x$hex_serial" -url http://10.60.0.1:8888 -CAfile /etc/openvpn/server/ca.crt 2>>/etc/openvpn/server/ocsp.log) echo "OCSP Status: $status" >> /etc/openvpn/server/ocsp.log if echo "$status" | grep -q "revoked"; then