yasharne / ocsp_checker

simple bash script to check if a certificate is revoked or not

OCSP Checker

Simple Script to check whether a certificate is revoked or not

Usage

bash ocsp_checker.sh wikipedia.org 443

ocsp_checker's Issues

Need to add Host header for systems using older OpenSSL versions

To make this bash script Generic so that it runs with any OpenSSL version , I suggest we change the last line of code:

openssl ocsp -noverify -issuer $CHAIN_CERT_FILE -cert $DESTINATION_CERT_FILE -text -url $OCSP_ADDRESS

to include the Host header, for Example:
openssl ocsp -noverify -issuer $CHAIN_CERT_FILE -cert $DESTINATION_CERT_FILE -text -url $OCSP_ADDRESS -header Host ocsp.godaddy.com

or for newer OpenSSL versions
openssl ocsp -noverify -issuer $CHAIN_CERT_FILE -cert $DESTINATION_CERT_FILE -text -url $OCSP_ADDRESS -header Host=ocsp.godaddy.com