From 481d88c06077ef72524906b2fb2568502d98c3d4 Mon Sep 17 00:00:00 2001 From: leishaoting Date: Tue, 19 Dec 2017 14:40:44 +0800 Subject: [PATCH] tests: Fix "ocsp: Digest must be before -cert or -serial" When executing ./start.sh with OpenSSL 1.1.0f, an OCSP operation fails. Put "-sha256" ahead of "-serial" to fix this. ~# openssl version OpenSSL 1.1.0f 25 May 2017 ~# openssl ocsp -reqout /lkp/benchmarks/hwsim/tests/hwsim/logs/current/ocsp-req.der -issuer /lkp/benchmarks/hwsim/tests/hwsim/auth_serv/ca.pem -serial 0xD8D3E3A6CBE3CD12 -no_nonce -sha256 ocsp: Digest must be before -cert or -serial ocsp: Use -help for summary. ~# openssl ocsp -reqout /lkp/benchmarks/hwsim/tests/hwsim/logs/current/ocsp-req.der -issuer /lkp/benchmarks/hwsim/tests/hwsim/auth_serv/ca.pem -sha256 -serial 0xD8D3E3A6CBE3CD12 -no_nonce Signed-off-by: leishaoting --- tests/hwsim/start.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/hwsim/start.sh b/tests/hwsim/start.sh index e7fb14889..fe4621273 100755 --- a/tests/hwsim/start.sh +++ b/tests/hwsim/start.sh @@ -165,7 +165,7 @@ for i in unknown revoked; do done openssl ocsp -reqout $LOGDIR/ocsp-req.der -issuer $DIR/auth_serv/ca.pem \ - -serial 0xD8D3E3A6CBE3CD12 -no_nonce -sha256 >> $LOGDIR/ocsp.log 2>&1 + -sha256 -serial 0xD8D3E3A6CBE3CD12 -no_nonce >> $LOGDIR/ocsp.log 2>&1 for i in "" "-unknown" "-revoked"; do openssl ocsp -index $DIR/auth_serv/index$i.txt \ -rsigner $DIR/auth_serv/ca.pem \