with the assumption it contains a complete HTTP response.
-engine id - Initialise and use the specified engine
-id_prefix arg - Generate SSL/TLS session IDs prefixed by 'arg'
-servername host - servername for HostName TLS extension
-servername_fatal - on mismatch send fatal alert (default warning alert)
-cert2 arg - certificate file to use for servername
-key2 arg - Private Key file to use for servername, in cert file if
-tlsextdebug - hex dump of all TLS extensions received
-no_ticket - disable use of RFC4507bis session tickets
-legacy_renegotiation - enable use of legacy renegotiation (dangerous)
server certificate private key file second server certificate private key file second server certificate file second certificate private key file warning: id_prefix is too long, only one new session will be possible
warning: id_prefix is too long if you use SSLv2
Setting secondary ctx parameters
Using default temp DH parameters
Using default temp ECDH parameters
unable to create curve (sect163r2)
Peer has incorrect TLSv1 block padding
Secure Renegotiation IS%s supported
cert_status: can't parse AIA URL
cert_status: no AIA and no default responder URL
cert_status: Can't retrieve issuer certificate.
cert_status: error querying responder
cert_status: ocsp response sent:
HTTP/1.0 200 ok
Content-type: text/html
Ciphers supported in s_server binary
---
Ciphers common between both SSL end points:
no client certificate available
'%s' contains '..' reference
HTTP/1.0 200 ok
Content-type: text/plain
'%s' is an invalid file name
Hostname in TLS extension: "%s"
Allocation error in generating RSA key
Generating temp (%d bit) RSA key... %4ld session cache hits
%4ld session cache misses
%4ld session cache timeouts
%4ld callback cache hits
server.pem server2.pem -port -accept verify depth is %d
-Verify -context -certform -dhparam -named_curve -dcertform -dcert -dkeyform -dpass -dkey -nocert -no_cache -crl_check -crl_check_all -serverpref -legacy_renegotiation -cipher -nbio -nbio_test -tlsextdebug -status_verbose -status_timeout -status_url Error parsing URL
-msg -hack -state -crlf -bugs -no_tmp_rsa -no_dhe -no_ecdhe -www -WWW -HTTP -no_ssl2 -no_ssl3 -no_tls1 -no_ticket -ssl2 -ssl3 -tls1 -dtls1 -timeout -mtu -chain -id_prefix -servername -servername_fatal -cert2 -key2 usage: s_server [args ...]
server certificate file error setting 'id_prefix'
id_prefix '%s' set.
Setting temp DH parameters
error setting cipher list
ACCEPT
Setting temp ECDH parameters
DELAY
ERROR
verify error:%s
SSL SESSION PARAMETERS Client certificate
subject=%s
issuer=%s
Shared ciphers:%s
(NONE) CIPHER is %s
Reused session-id
NOT s_server.c shutting down SSL
CONNECTION CLOSED
turning on non blocking io
TIMEOUT occured
lf_num == 0 DONE
shutdown accept socket
SSL_do_handshake -> %d
Write BLOCK
Read BLOCK
cert_status: callback called
cert_status: AIA URL: %s
read R BLOCK
GET GET /stats
%-11s:%-25s ---
New, ---
Reused, %s, Cipher is %s
GET / '%s' is an invalid path
Error accessing '%s'
'%s' is a directory
Error opening '%s'
FILE:%s
.html .php .htm rwrite W BLOCK
Swiching server context.
Lets print some clear text
=C`C(C(C(C`CDEDCHHHDCCsv_body ---
Certificate chain
%2d s:%s
i:%s
Server certificate
Server public key is %d bit
Compression: %s
Expansion: %s
localhost s_client.c -host -connect -sess_out -sess_in -prexit -ign_eof -no_ign_eof -pause -showcerts -reconnect -legacy_server_connect -no_legacy_server_connect -starttls smtp pop3 imap ftp xmpp -ssl_client_engine usage: s_client args
client certificate file Can't open session file %s
connect:errno=%d
CONNECTED(%08X)
getsockname:errno=%d
EHLO openssl.client.net
STARTTLS STLS
. CAPABILITY
. STARTTLS
AUTH TLS
/stream:features> Error writing session file %s
drop connection and then reconnect
======================================
======================================
srrfroZonwr;xwwvws_client_main Doing %s for %ds on %d size blocks: Doing %d bit %s %s's for %ds: %s is an unknown cipher or digest
aes-128-cbc aes-192-cbc aes-256-cbc aes-128-ige aes-192-ige aes-256-ige rsa512 rsa1024 rsa2048 rsa4096
ecdsap160 ecdsap192 ecdsap224 ecdsap256 ecdsap384 ecdsap521
ecdsak163 ecdsak233 ecdsak283 ecdsak409 ecdsak571
ecdsab163 ecdsab233 ecdsab283 ecdsab409 ecdsab571
ecdhp160 ecdhp192 ecdhp224 ecdhp256 ecdhp384 ecdhp521
ecdhk163 ecdhk233 ecdhk283 ecdhk409 ecdhk571
ecdhb163 ecdhb233 ecdhb283 ecdhb409 ecdhb571
-elapsed measure time in real time instead of CPU user time.
-decrypt time decryption instead of encryption (only EVP).
-mr produce machine readable output.
-multi n run n benchmarks in parallel.
Don't understand line '%s' from child %d
Unknown type '%s' from child %d
You have chosen to measure elapsed time instead of user CPU time.
To get the most accurate results, try to run this
program when this computer is idle.
internal error loading RSA key number %d
RSA sign failure. No RSA sign will be done.
%ld %d bit private RSA's in %.2fs
RSA verify failure. No RSA verify will be done.
%ld %d bit public RSA's in %.2fs
DSA sign failure. No DSA sign will be done.
%ld %d bit DSA signs in %.2fs
DSA verify failure. No DSA verify will be done.
%ld %d bit DSA verify in %.2fs
ECDSA sign failure. No ECDSA sign will be done.
%ld %d bit ECDSA signs in %.2fs
ECDSA verify failure. No ECDSA verify will be done.
%ld %d bit ECDSA verify in %.2fs
ECDH computations don't match.
timing function used: %s%s%s%s%s%s%s
The 'numbers' are in 1000s of bytes per second processed.
rsa %4u bits %8.6fs %8.6fs %8.1f %8.1f
%18ssign verify sign/s verify/s
dsa %4u bits %8.6fs %8.6fs %8.1f %8.1f
%4u bit ecdsa (%s) %8.4fs %8.4fs %8.1f %8.1f
%30ssign verify sign/s verify/s
%4u bit ecdh (%s) %8.4fs %8.1f
+DT:%s:%d:%d
+DTP:%d:%s:%s:%d
speed.c -elapsed -evp no EVP given
no engine given
-multi no multi count given
bad multi count
-mr ripemd aes-128-ige aes-192-ige aes-256-ige openssl dsa512 dsa1024 dsa2048 rsa512 rsa1024 rsa2048 rsa4096 blowfish cast5 aes ecdsap160 ecdsap192 ecdsap224 ecdsap256 ecdsap384 ecdsap521 ecdsak163 ecdsak233 ecdsak283 ecdsak409 ecdsak571 ecdsab163 ecdsab233 ecdsab283 ecdsab409 ecdsab571 ecdsa ecdhp160 ecdhp192 ecdhp224 ecdhp256 ecdhp384 ecdhp521 ecdhk163 ecdhk233 ecdhk283 ecdhk409 ecdhk571 ecdhb163 ecdhb233 ecdhb283 ecdhb409 ecdhb571 ecdh Error: bad option or value
Available values:
md2 md4 md5 hmac sha1 sha256 sha512 rc2-cbc des-cbc des-ede3 dsa512 dsa1024 dsa2048
ecdsa
ecdh
rc2 des aes rsa Available options:
-evp e use EVP e.
Forked child %d
Got: %s from %d
+F: +F2: +F3: +F4: +F5: +H: %d %s's in %.2fs
+R:%d:%s:%f
This is a key... private RSA sign failure
+R1:%ld:%d:%.2f
public RSA verify failure
+R2:%ld:%d:%.2f
+R3:%ld:%d:%.2f
+R4:%ld:%d:%.2f
ECDSA failure.
ECDSA sign failure
+R5:%ld:%d:%.2f
ECDSA verify failure
+R6:%ld:%d:%.2f
ECDH failure.
ECDH key generation failure.
%ld %d-bit ECDH ops in %.2fs
+R7:%ld:%d:%.2f
options: %s
%s
available timing options: TIMES TIMEB HZ=%g [sysconf value] times ftime +H type %7d bytes :%d +F:%d:%s %-13s :%.2f %11.2f %11.2fk +F2:%u:%u:%f:%f
+F3:%u:%u:%f:%f
+F4:%u:%u:%f:%f
secp160r1 nistp192 nistp224 nistp256 nistp384 nistp521 nistk163 nistk233 nistk283 nistk409 nistk571 nistb163 nistb233 nistb283 nistb409 nistb571 +F5:%u:%u:%f:%f
%30sop op/s
hmac(md5) des cbc des ede3 idea cbc seed cbc rc2 cbc rc5-32/12 cbc blowfish cbc cast cbc aes-128 cbc aes-192 cbc aes-256 cbc camellia-128 cbc camellia-192 cbc camellia-256 cbc aes-128 ige aes-192 ige aes-256 ige @ string to make the random number generator think it has entropy ; ; 4Vx4VxVx4x4V4Vx4VxVx4 4Vx4VxMbP? @@ ? @localhost:4433 -reuse -www option too long
-time usage: s_time
SSL_CIPHER No CIPHER specified
GET %s HTTP/1.0
Unable to get connection
starting -connect host:port - host:port to connect to (default is %s)
-nbio - Run with non-blocking IO -ssl2 - Just use SSLv2 -ssl3 - Just use SSLv3 -bugs - Turn on SSL bug compatibility -new - Just time new connections -reuse - Just time connection reuse -www page - Retrieve 'page' from the site Collecting connection statistics for %d seconds
%d connections in %.2fs; %.2f connections/user sec, bytes read %ld
%d connections in %ld real seconds, %ld bytes read per connection
Now timing with session id reuse. Y@ư>hX88888888888888888888h8888888h88888X8888X888888888888h8888888h88888X8888XPKCS12 P12 p12 Invalid Policy "%s"
unrecognized purpose
-ignore_critical -issuer_checks -policy_check -explicit_policy -x509_strict -policy_print -check_ss_sig apps.c file name too long
%s.attr %s.attr.%s %s.%s unable to rename %s to %s
unable to open '%s'
unique_subject = %s
Out of memory
Error configuring OpenSSL
auto enabling auto ENGINE support
dynamic SO_PATH LOAD invalid engine "%s"
SET_USER_INTERFACE can't use that engine
engine "%s" set.
copy copyall Error opening %s %s
unable to load certificates
Error reading %s %s no keyfile specified
no engine specified
unable to load %s
oid_section pass: env: file: Can't open file %s
fd: Can't open BIO for stdin
pass phrase User interface error
aborted!
issuer= reading certificate unable to load certificate
cannot load %s from engine
False True Require explicit Policy: %s
Authority %s Policies:
User esc_2253 esc_ctrl esc_msb use_quote ignore_type show_type dump_all dump_nostr dump_der compat sep_comma_plus sep_comma_plus_space sep_semi_plus_space sep_multiline dn_rev nofname sname lname align space_eq dump_unknown RFC2253 oneline ca_default compatible no_header no_version no_serial no_signame no_validity no_subject no_issuer no_pubkey no_extensions no_sigdump no_aux no_attributes ext_default ext_error ext_parse ext_dump Subject does not start with '/'.
escape character at end of string
end of string encountered while processing type of subject name element #%d
Subject Attribute %s has no known NID, skipped
No value provided for Subject Attribute %s, skipped
error creating serial number index:(%ld,%ld,%ld)
error creating name index:(%ld,%ld,%ld)
error on line %ld of db attribute file '%s'
error converting serial to ASN.1 format
unable to load number from %s
error converting number from bin to BIGNUM
bad input format specified for %s
bad input format specified for key file
problem loading oid section %s
problem creating object %s=%s
Can't read environment variable %s
Can't access file descriptor %s
Invalid password argument "%s"
Error reading password from BIO
OpenSSL application user interface Error loading PKCS12 file for %s
Passpharse callback error for %s
Mac verify error (wrong password?) in PKCS12 file for %s
Error reading header on certificate
<<< >>> DTLS 1.0 (bad) SSL 2.0 DTLS 1.0 , CLIENT-HELLO , ERROR: NO-CIPHER-ERROR NO-CERTIFICATE-ERROR BAD-CERTIFICATE-ERROR , CLIENT-MASTER-KEY , CLIENT-FINISHED , SERVER-HELLO , SERVER-VERIFY , SERVER-FINISHED , REQUEST-CERTIFICATE , CLIENT-CERTIFICATE Alert Handshake , ??? , warning , fatal unexpected_message bad_record_mac decryption_failed record_overflow decompression_failure handshake_failure bad_certificate unsupported_certificate certificate_revoked certificate_expired certificate_unknown illegal_parameter unknown_ca access_denied decode_error decrypt_error export_restriction protocol_version insufficient_security internal_error user_canceled no_renegotiation , HelloRequest , ClientHello , ServerHello , Certificate , ServerKeyExchange , CertificateRequest , ServerHelloDone , CertificateVerify , HelloVerifyRequest , ClientKeyExchange , Finished %s %s%s [length %04lx]%s%s
%02x SSL 3.0 ChangeCipherSpec close_notify s_cb.c max fragment length server name client certificate URL trusted CA keys truncated HMAC status request elliptic curves EC point formats server ticket renegotiate SSL_connect undefined SSL_accept write read SSL3 alert %s:%s:%s
%s:failed in %s
%s:error in %s
error setting certificate
error setting private key
depth=%d %s
verify error:num=%d:%s
issuer= %s
verify return:%d
UNSUPPORTED-CERTIFICATE-TYPE-ERROR error setting random cookie secret
TLS %s extension "%s" (id=%d), len=%d
read from %p [%p] (%d bytes => %ld (0x%lX))
write to %p [%p] (%d bytes => %ld (0x%lX))
Private key does not match the certificate public key
unable to get certificate from '%s'
unable to get private key from '%s'
Z<==<4;4;4;4;4;4;4;4;4;/>4;4;4;4;4;4;4;4;4;#>> >4;4;4;4;4;4;4;=4;4;4;4;4;4;4;4;4;=4;========={=4;4;4;4;4;4;4;4;o=4;4;4;4;4;4;4;4;4;c=W=4;4;4;4;4;4;4;4;K=4;4;4;4;4;4;4;4;4;?=4;4;4;4;4;4;4;4;4;3=KEKEEKEKEKEKEKEKEE EKEKEE Etcp getservbyname failure for %s
bind errno=%d bad gethostbyaddr
s_socket.c gethostbyname failure
%u.%u.%u.%u invalid IP address
no port defined
socket keepalive gethostbyname addr is not AF_INET
unable to write 'random state'
unable to load 'random state'
This means that the random number generator has not been seeded
Consider setting the RANDFILE environment variable to point at a file that
'random' data can be kept in (the file will be overwritten).
with much random data.
-b -f -o usage:version -[avbofpd]
OpenSSL 0.9.8o 01 Jun 2010 %s (Library: %s)
options: unable to load SSL_SESSION
Context too long
No certificate present
unable to write SSL_SESSION
unable to write X509
usage: sess_id args
-text - print ssl session id details
-cert - output certificate
-context arg - set the session ID context
-h -? Error in cipher list
usage: ciphers args
-ssl2 - SSL2 mode
-ssl3 - SSL3 mode
-tls1 - TLS1 mode
-v - verbose mode, a textual listing of the ciphers in SSLeay
-toseq Can't open input file %s
Can't open output file %s
Error reading certs file %s
Usage nseq [options]
-in file input file
-out file output file
Error reading sequence file %s
Netscape certificate sequence utility
-toseq output NS Sequence file
%02X %s:
%s:
%s, Iteration %ld
Key bag
Bag Attributes Key Attributes Shrouded Keybag: Certificate bag
Safe Contents bag
PKCS7 Data
PKCS7 Encrypted data: -nokeys -keyex -keysig -nocerts -clcerts -cacerts -info -twopass -nomacver -descert -export -noiter -maciter -nomaciter -nomac -certpbe Unknown PBE algorithm %s
-keypbe -LMK -CSP -caname -password Usage: pkcs12 [options]
-in infile input filename
Error opening input file %s
Enter MAC Password: Can't read Password
Nothing to do!
certificates from certfile Memory allocation error
Error %s getting chain.
Enter Export Password: Enter Import Password: MAC Iteration %ld
MAC verified OK
Warning unsupported bag type: -export output PKCS12 file
-chain add certificate chain
-inkey file private key if not infile
-certfile f add all certs in f
-CApath arg - PEM format directory of CA's
-CAfile arg - PEM format file of CA's
-name "name" use name as friendly name
-caname "nm" use nm as CA friendly name (can be used more than once).
-out outfile output filename
-noout don't output anything, just verify.
-nomacver don't verify MAC.
-nocerts don't output certificates.
-clcerts only output client certificates.
-cacerts only output CA certificates.
-nokeys don't output private keys.
-info give info about PKCS#12 structure.
-des encrypt private keys with DES
-des3 encrypt private keys with triple DES (default)
encrypt PEM output with cbc aes
-nodes don't encrypt private keys
-noiter don't use encryption iteration
-maciter use MAC iteration
-twopass separate MAC, encryption passwords
-descert encrypt PKCS#12 certificates with triple DES (default RC2-40)
-certpbe alg specify certificate PBE algorithm (default RC2-40)
-keypbe alg specify private key PBE algorithm (default 3DES)
-keyex set MS key exchange type
-keysig set MS key signature type
-password p set import/export password source
-passin p input file pass phrase source
-passout p output file pass phrase source
-engine e use engine e, possibly a hardware device.
load the file (or the files in the directory) into
the random number generator
-CSP name Microsoft CSP name
-LMK Add local machine keyset attribute to private key
No certificate matches private key
Mac verify error: invalid password?
Error outputting keys and certificates
-v2 Unknown cipher %s
-v1 -topk8 -nocrypt -nooct -nsdb -embed Usage pkcs8 [options]
Error converting key
Bad format specified for key
Enter Encryption Password: Error encrypting key
Error reading key
Enter Password: Error decrypting key
Unknown broken type
-inform X input format (DER or PEM)
-passin arg input file pass phrase source
-outform X output format (DER or PEM)
-passout arg output file pass phrase source
-topk8 output PKCS8 file
-nooct use (nonstandard) no octet format
-embed use (nonstandard) embedded DSA parameters format
-nsdb use (nonstandard) DSA Netscape DB format
-noiter use 1 as iteration count
-nocrypt use or expect unencrypted private key
-v2 alg use PKCS#5 v2.0 and cipher "alg"
-v1 obj use PKCS#5 v1.5 and cipher "alg"
Warning: broken key encoding: No Octet String in PrivateKey
DSA parameters included in PrivateKey
DSA public key include in PrivateKey
-challenge -spksect %s [options]
Error opening output file
SPKAC=%s
Error opening input file
Error parsing config file
Can't find SPKAC called "%s"
Error loading SPKAC
Signature OK
Signature Failure
-key arg create SPKAC using private key
-passin arg input file pass phrase source
-challenge arg challenge string
-spkac arg alternative SPKAC name
-noout don't print SPKAC
-verify verify SPKAC signature
-engine e use engine e, possibly a hardware device.
-pk7out -rc2-40 -rc2-128 -rc2-64 -nointern -nochain -noattr -nodetach -nosmimecap -nosigs -nooldmime -crlfeol -to -from -signer -recip -content -sign sign message
-in file input file
-out file output file
-to addr to address
-from ad from address
-subject s subject
recipient certificate file signer certificate signing key file Error reading S/MIME message
Can't read content file %s
Verification successful
Verification failure
To: %s
From: %s
Subject: %s
Error writing signers to %s
No signer certificate specified
No recipient certificate or key specified
No recipient(s) certificate(s) specified
Usage smime [options] cert.pem ...
-encrypt encrypt message
-decrypt decrypt encrypted message
-verify verify signed message
-pk7out output PKCS#7 structure
-des3 encrypt with triple DES
-des encrypt with DES
-rc2-40 encrypt with RC2-40 (default)
-rc2-64 encrypt with RC2-64
-rc2-128 encrypt with RC2-128
encrypt PEM output with cbc aes
-nointern don't search certificates in message for signer
-nosigs don't verify message signature
-noverify don't verify signers certificate
-nocerts don't include signers certificate when signing
-nodetach use opaque signing
-noattr don't include any signed attributes
-binary don't translate message to text
-certfile file other certificates file
-signer file signer certificate file
-recip file recipient certificate file for decryption
-inform arg input format SMIME (default), PEM or DER
-inkey file input private key (if not signer or recipient)
-keyform arg input private key format (PEM or ENGINE)
-outform arg output format SMIME (default), PEM or DER
-content file supply or override content for detached signature
-text include or delete text MIME headers
-CApath dir trusted certificates directory
-CAfile file trusted certificates file
-crl_check check revocation status of signer's certificate using CRLs
-crl_check_all check revocation status of signer's certificate chain using CRLs
-engine e use engine e, possibly a hardware device.
-passin arg input file pass phrase source
load the file (or the files in the directory) into
cert.pem recipient certificate(s) for encryption
Bad input format for PKCS#7 file
Error creating PKCS#7 structure
Error decrypting PKCS#7 structure
Bad output format for PKCS#7 file
Usage: rand [options] num
-out file - write to file
-engine e - use engine e, possibly a hardware device.
-rand file%cfile%c... - seed PRNG from files
-base64 - base64 encode output
-hex - hex encode output
[Error]: internal stack error
[Error]: command name too long
usage: engine opts [engine ...]
-v[v[v[v]]] - verbose mode, for each engine, list its 'control commands'
-vv will additionally display each command's description
-vvv will also add the input flags for each command
-vvvv will also show internal input flags
-c - for each engine, also list the capabilities
-t[t] - for each engine, check that they are really available
-tt will display error trace for unavailable engines
-pre - runs command 'cmd' against the ENGINE before any attempts
to load it (if -t is used)
-post - runs command 'cmd' against the ENGINE after loading it
(only used if -t is also provided)
NB: -pre and -post will be applied to all ENGINEs supplied on the command
line, or all supported ENGINEs if none are specified.
Eg. '-pre "SO_PATH:/lib/libdriver.so"' calls command "SO_PATH" with
argument "/lib/libdriver.so".
[Failure]: %s
[Success]: %s
engine.c -t -pre -post Loaded: (%s) %s
DH RAND [%s]
[ available ]
[ unavailable ]
%s: %s
%s%s(input flags):
[Internal] NUMERIC | STRING NO_INPUT <0x%04X> Error creating connect BIO
Error creating SSL context.
Error connecting BIO
Can't get connection fd
Timeout on connect
Unexpected retry condition
Timeout on request
Select error
Error accepting connection
POST Invalid request
Error parsing OCSP request
Illegal timeout value %s
-url -ignore_err -nonce -no_nonce -resp_no_certs -resp_key_id -no_certs -no_signature_verify -no_cert_verify -no_chain -no_cert_checks -no_explicit -trust_other -no_intern -req_text -resp_text -reqin -respin -VAfile -sign_other -verify_other -validity_period Illegal validity period %s
-status_age Illegal validity age %s
-reqout -respout -path issuer certificate Error Creating OCSP request
-index -nmin Illegal update period %s
-nrequest Illegal accept count %s
-ndays -rsigner -rkey -rother OCSP utility
Usage ocsp [options]
-CA file CA certificate
Error reading OCSP request
Error setting up accept BIO
responder certificate responder other certificates responder private key signer certificates signer private key Error signing OCSP request
Error opening file %s
bn ocsp.c Error reading OCSP response
Responder Error: %s (%d)
validator certificate Error parsing response
Nonce Verify error
Response Verify Failure
Response verify OK
ERROR: No Status found.
This Update: Next Update: Reason: %s
Revocation Time: Error querying OCSP responsder
No issuer certificate specified
Error converting serial number %s
-out file output filename
-issuer file issuer certificate
-cert file certificate to check
-serial n serial number to check
-signer file certificate to sign OCSP request with
-signkey file private key to sign OCSP request with
-sign_other file additional certificates to include in signed request
-no_certs don't include any certificates in signed request
-req_text print text form of request
-resp_text print text form of response
-text print text form of request and response
-reqout file write DER encoded OCSP request to "file"
-respout file write DER encoded OCSP reponse to "file"
-reqin file read DER encoded OCSP request from "file"
-respin file read DER encoded OCSP reponse from "file"
-nonce add OCSP nonce to request
-no_nonce don't add OCSP nonce to request
-url URL OCSP responder URL
-host host:n send OCSP request to host on port n
-path path to use in OCSP request
-CApath dir trusted certificates directory
-CAfile file trusted certificates file
-VAfile file validator certificates file
-validity_period n maximum validity discrepancy in seconds
-status_age n maximum status age in seconds
-noverify don't verify response at all
-verify_other file additional certificates to search for signer
-trust_other don't verify additional certificates
-no_intern don't search certificates contained in response for signer
-no_signature_verify don't check signature on response
-no_cert_verify don't check signing certificate
-no_chain don't chain verify response
-no_cert_checks don't do additional checks on signing certificate
-port num port to run responder on
-index file certificate status index file
-rsigner file responder certificate to sign responses with
-rkey file responder key to sign responses with
-rother file other certificates to include in response
-resp_no_certs don't include any certificates in response
-nmin n number of minutes before next update
-ndays n number of days before next update
-resp_key_id identify reponse by signing certificate key ID
-nrequest n number of requests to accept (default unlimited)
Error Opening OCSP request file
Error loading responder certificate
Waiting for OCSP client connections...
Need an OCSP request for this operation!
Error loading signer certificate
Need a responder certificate, key and CA for this operation!
Error Opening OCSP response file
WARNING: no nonce in response
WARNING: Status times invalid.
-checks Unknown option '%s'
No prime specified
not is %sprime
%-14s hex
-checks %-14s number of checks
;x d < dT t t d< \ # d6< ?t N dO dP k4 dlT w d ą D
$T
4
ԍ
$
ԑ
$, T t d T $- 54
DBl
B
M
4O
tc4 l d d 4 $D td d t $ TL l d t", d#L #l $$ $ % % t& D' ( t(, Ĵd 4 $ 4 D $ < T l 4 $ L t T , T Tt $, L $ L | 4 4 DT t t, T | 4 4 T < 4 \
D tD d T d $ T, d t& $* - .< /l D0 0 1 D5 54 7l T^ j r TL l ԛ T t L T $ ,! D! zR x 4 L ( $ d V MMN`K 4 X BBB B(CH0CA8G d @ F , Q BBB CA(A0 8J LLK $ , hX M_PG 4 T BBB B(A0A8DZ 4 h BBB B(CF0BF8G y ACD 4 BBB B(A0CA8G
n 4 + BBB CB(CA0A8G| 4 T j BCBCB B(A0CA8CG 4 Q BBB CG(A0BF8GL 4 .5 BBB CG(CF0A8D 4 (7> BBB B(A0CF8BL 4 0Fy ACD , T F BCBCA A(CD0 4 `GG BBCG CG(A0A8GX xb N C 4 c| BCBB B(CA0CA8CG 4 Pnt BGB B(A0CF8GAX 4 L w_ BBB B(CF0A8BI` {y ACD 4 | BBB B(A0CF8BL 4 }
BBB CB(CA0CA8CG` $ BCAA CD@ < N AFAD@t \ H MV0I4 | ؆J BBB B(A0A8Gi $ T MMQh (S N E 4 h~ BGBCB CB(A0CA8DE4 4 ~K BBB B(A0BF8CL
4 l BBB CG(CF0A8D 4 * BBB CG(CF0A8G 4
BBB CB(CA0A8GL 4 p
BBB CG(CF0A8GX 4 L BBB CB(CA0A8GG 4 BBB CG(CF0A8GR 4 (| BBB B(A0CF8BL 4y ACD 4 05( BBB CG(CF0A8GX 4 L (@; BDB B(CA0CH8CD@ 4 0A> BBB CG(A0BF8G 4 8U1 BBB CB(CA0A8G LQ0C 4 І BBB CB(A0EA8BG L y ACD 4 l B BBB CG(CF0A8DI $ BECA C ؘO U B 4 -$ BBB B(CA0BA8GE $ $
BAA CG@ 4 L
BGB CG(CH0A8G $
p M^` $
S HcQ
U C
d LI L , BBCA CA(CG0 4 D BBB B(CA0CA8CG@ 4 | a- BICB CB(A0A8G@ @ U0C TD ' K S AP $ D < T A l A @ A T AF 4 @I BBB B(CF0A8BLT $ X M[
} D 4 ,
BBB B(A0CF8BL@ d
@ |
8
0C
h6
$ M[PC 4 4 h BBB CB(A0BA8DpE l " DC $ и/ MMQ C $ ػ MY C $ 1 MMQC AC 0 , ( $ D 0W MML l h MI0F $ MMLO $ MMLC h S } N F 8 MV0F < T MN0C \ MI0I 4 | 2 BCBB B(A0A8CDP HP C 4 `9 BCBB B(A0A8CDP h $ ` 4 < X BCBB CA(BA0CD@ 4 t BCBCB CB(A0CA8D`E $ U MMNPM , BIA CC(CG0 HbG $ $ MMN@L $ L < L[PF t % D (f K AC | ACACG ACACG X AC ` ML C 4 4 BCBCB CB(A0A8CD@ l N MN F $ MMQC $ @4 LMNF $ X MMNpM , BCEB A(CA0C , 4 BKCH CA(D@Q d P LQP PD MQJ 9 MI F D QI J $ MMNPC x ACACD , MI F $ L
MMT t S C 4 0% BCFB B(CA0BA8Dk (, MN@^ 8 MX0F r MIPM , ( D w ACG , d BCBCA A(D0E . MLI 4 " BBB B(CF0A8BIP 4 BBB CG(CF0A8D 4 $ BBB CB(CA0A8G 4 \ H
BBB B(A0CA8D@G , L BCBCA BA(D0D , BECB A(CA0C $ D BCACA B MI0[ < ( ]C $ \ M[`F 4 @z BCBCB CB(CA0CA8BDP4 BCBCB CB(A0A8BD` 4 `& BGB B(CF0A8GX 4 , ?5 BBB B(A0A8CG 4 d K BBB B(CF0CF8DI 4 S" BKB B(A0A8G| vD LD 4 0v/ BGB B(CF0A8G!K , (| 4 D |j BCEB CB(A0A8GE | X} MV0C4 X~i BBB CB(CA0A8G 4 * BCBB CB(CA0CA8GP4 > BDCB B(CF0A8CL 4 D : BIB B(A0CA8GV 4 | ( BBB B(CF0A8BIP $ Q_@F E hE 5E ?E m"F v"F "F "F qE "F "F @ "F "F "F "F "F "F "F #F #F #F ` ` #F ` &#F ` ,#F ^E @ ` 2#F ;#F H#F P#F #F X#F c#F X#F n#F x#F #F #F #F #F @ #F #F #F #F #F #F #F #F $F $F X 6 !6 +6 @
HXE `@ o @ pj@ @
n9 8f M د@ (@ o @ o o ޣ@ Ȕf @ &@ 6@ F@ V@ f@ v@ @ @ @ @ @ @ @ @ @ @ &@ 6@ F@ V@ f@ v@ @ @ @ @ @ @ @ @ @ @ &@ 6@ F@ V@ f@ v@ @ @ @ @ @ @ @ @ A A & A 6 A F A V A f A v A A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A & A 6 A F A V A f A v A A A A A A A A A
A
A &
A 6
A F
A V
A f
A v
A
A
A
A
A
A
A
A
A A A & A 6 A F A V A f A v A A A A A A A A A A A & A 6 A F A V A f A v A A A A A A A A A
A
A &
A 6
A F
A V
A f
A v
A
A
A
A
A
A
A
A
A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A &A 6A FA VA fA vA A A A A A A A A A A & A 6 A F A V A f A v A A A A A A A A A A A & A 6 A F A V A f A v A A A A A A A A A A A & A 6 A F A V A f A v A A A A A A A A A A A & A 6 A F A V A f A v A A A A A A A A A A A & A 6 A F A V A f A v A A A A A A A A A !A !A &!A 6!A F!A V!A f!A v!A !A !A !A !A !A !A !A !A "A "A &"A 6"A F"A V"A f"A v"A "A "A "A "A "A "A "A "A #A #A &#A 6#A F#A V#A f#A v#A #A #A #A #A #A #A #A #A $A $A &$A 6$A F$A V$A f$A v$A $A $A $A $A $A $A $A $A %A %A &%A 6%A F%A V%A f%A v%A %A %A %A %A %A %A %A %A &A &A &&A 6&A F&A V&A f&A v&A &A &A &A &A &A &A &A &A 'A 'A &'A 6'A F'A V'A f'A v'A 'A 'A 'A 'A 'A 'A 'A 'A (A (A &(A 6(A F(A V(A f(A v(A (A (A (A (A (A (A (A (A )A )A &)A 6)A F)A V)A f)A v)A )A )A )A )A )A )A )A )A *A *A &*A 6*A F*A V*A f*A v*A *A *A *A *A *A *A *A *A +A +A &+A 6+A F+A V+A f+A v+A +A +A +A +A +A +A +A +A ,A ,A &,A 6,A F,A V,A f,A v,A ,A ,A ,A ,A ,A ,A ,A ,A -A -A &-A 6-A F-A V-A f-A v-A -A -A -A -A -A -A -A -A .A .A &.A 6.A F.A V.A f.A v.A .A .A .A .A .A .A .A .A /A /A &/A 6/A F/A V/A f/A v/A /A /A /A /A /A /A /A /A 0A 0A &0A 60A F0A V0A f0A qE ?A RE EA XE 0^A YE A F A E PA E A YE A YE A YE A n*F B -E rB E B YE @B F ЖB }E pB ,F pB YE B rE B YE B YE C YE C YE ^C YE C ZE D *F D ZE bB
ZE pjB ZE 0D ZE D $ZE ГD )ZE D 0ZE D bE @D 6ZE `D qE PD I]E E |Gt3 E E Vx44Vx4Vx 0: A 3O<}UO[g[h4ޥ. 3n4^qإerwW_UWI A Wj`Rrf };
B# ( %%/p߁ImT.&ުY1! G;ZFŹ+ xz3pBkh$!
hwn|ڼ>S"絮n Ue LsjI)a F
X^{BXEA 1W=[/_OGV? )[Iz*!,IOQmKKR, 0\ ܘC=C[Щ>˃uk4A)jUMp쮇8
EwnW`W"ˏ3: 7o림 Sp!v>/E$Y2.;#x=gO7NGL-O A.-",SU +?X :0ڰ-O&8= pQQy2{-'ŜyR|I ˊf$3;@VP澄 %Ӝlb]+}=zlTQ [GdUZ7%}!ioɊ@zp
NFz۳˃# ĽԪ]1FΞugSGD%s~ЎYѲZ/9ͣ¹ǹHƘMʄl)Y5dY!3 kQ^_ƹ"eFD#33k Ytj>6P!Бl/&0ej0VboVqIZM4Xy0UlZL,YV蝯
xQUC;l -A(Пj~ Ы|}5'IQcd>amS9'Ogw:o s>z(a#+΄W~% Te̕
0Y akNCy% Hh f+vFNY LeHxC ,$}ZpEl)@?[GD9rzڪ* T#7[a
~$sm@r HlF9OxFj1d 8 <*+16`-t2蜓n{ q%8*7Dΐ?RR"8v iXj}| ,2O
7C]$'FTSbq+qAu:a)F:ck0N% Uj̙r}m䐵pNH`* z=$)ڽפ`-"ek(/y |CBjEO.4T}my.QMyVD7ZHH?,QFAƑrUs,tP:/mwmE i'e ^4Ӂ=0C#Bv1sFa
9@zۀ,
4Ԓ lnOϯL wvrGќJ3nuv1w)R .R0u ͉ lW'= / \v)K xraao9N>Ǐ68%zJԠ >!9r=P]_ ?mU
![&+wOv ,"j办VxD^`ey1#.t॔KXU346Wy.;N!\HJ`)S--o B.q1mo+#ߴ@,
}} Kߑk
iif[F}pm~uNwMA?b q^8K,0oI.ɚ] U:%#Вã/MUZ1u,A _u c,h˓QsI`&FP_Y T͘At_ `{< 뤓ʚ' e[yn&(; smSX `\vCX$; $ET7c}t!HĔD"-->Z1ܕAX@_ڬ? *kX_Hx $< %kBl61z&v jb
|I
wgG!?C!F0bQrHg͞!0A4w>9g*{/@pO? vJ5NG+]tC3{I @fbz˓SԀH'KAa߿=q %qJWl!}5EjC\T _$.@ޒ#YҡL e[·Uq<
$ka3B+wtyyϭ W5 tqXk2]vH9#wJp>l R$ AZz ^15uĖt۴Ȍ;fPGeb4X5j, Zhxdk>Nz¶ vœjiV4J
n5`#0d9`vQJ<:, `iJ!IT X!QG>TFٶdT/ϥ(9v[-C$oio}_x@ (eƞ Vp RҔJ%L.y\ՎTU%vcP"/XXykAg &lWa:}1-8b6BB$ge |oDɫLE{80X+]
TIM"@P.x(x$V,Cfr_S챱^@ H{?j!5 GŊO^c`q[JO`ƺJ$ .:' !
QU0cą N'|.墣Lc 9wfʠqP=5.`haCʚ#J Er aww*-Va^jFJ?PֺוeSá nCӁFFHNy@4q^J^Op-=:ը
9 _!1trkd5a
9!f
|ʡZqT(pCl{hMEF C,FN&.۰U*PD!: 2g蠋kE vϑ GjZ 7dy=a!t]LQG\LzrSxH:џ}G{tPVW+AV8 F
NDC!]n&1
!Ľ$PH,.I_W'6 +٘4PXTctvR{(JNy؛f/ϬyEx ~"Qgp MO@~rR33Π%]oO4~o0o٠]\ A2 ¢~h\(!XcLNKMX\Ug}n To@gL[<zgi
@v&CV(_;i6,Qw/W{b;@{h
8!]F #rQFyٽ,W~= {k&'jw,B҈ӒQd\lG % ??!
]Te}ð hϛ3MӔ> btơu ,xY4cO/ <8?~%r 9 캐[:Xl0B71jj )F˅ 0^9""4ah7=.J[HcӖd4ѠѮl/HC!0_ޣpx. }nBܷF 6MF=(1gPޛ~, Pa孽6N@}
K?nAj)}G0 j3 =S.Ys>u1GzR٦{8h ~KS[Yqenfk6(ץ,9&Kښp7V#^9OC eòp[PI1lՅ ePfeo MLoPF%ho0i](Hޙ?_ s$
]*?'b{tbSa'z MTXItU~#Za~qM4)h^ lAsj~2e8`$ԜL z"
h__;kܾz:'IC=~,^{nln8]V}S>$
k i&+pSFbP3Kʼns;lIǟ
D0پ[_t) ,TQޠ/$kwޢhR AZE FvE EZE IZE YF QZE VZE ZE cF kF tF }F F F F F F F F F F F F 1vE ?vE F F !F -time arg - max number of seconds to collect data, default %d
-verify arg - turn on peer certificate verification, arg == depth
-cert arg - certificate file to use, PEM format assumed
-key arg - RSA file to use, PEM format assumed, key is in cert file
file if not specified by this option
-CApath arg - PEM format directory of CA's
-CAfile arg - PEM format file of CA's
-cipher - preferred cipher to use, play with 'openssl ciphers'
F 4F E E حE @E pE (4F `4F E 4F 4F 85F 4F 5F 5F hSF SF SF 0TF xTF TF TF @UF UF UF VF PVF VF VF WF XWF .shstrtab .interp .note.ABI-tag .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .data.rel.ro .dynamic .got .got.plt .data .bss @ @ ! <@ < $ 8 `@ ` 4 o @ > @ xQ F pj@ pj n9 N o ޣ@ ޣ [ o @ j (@ ( t د@ د M
~ @ y @ p3 p0A p0 ' HXE HX `XE `X J iF i | (oF (o f f f @f @ Ȕf Ȕ f 8f 8 f ( f