VM malformed request seen in logs
3 years ago
Originally Published: 2007-02-27
Article Number
000055782
Applies To
Validation Manager 3.0
Microsoft Windows Windows Server SP1
Identrus
Issue
VM malformed request seen in logs

When a request to Validation Manager for an end-entity certificate that contains a service locator extension with the  following two locators in the precise order;

 1.2.840.114021.4.1 - URI:https://tc20.identrus.com
 OCSP - URI:https://identrus20.identrus.com

The following message appears in the trace log;

[Tue Feb 20 08:57:41 2007] APR_EGENERAL in sendAndReceiveOcspByHttp at ocsp_identrus.c:180
[Tue Feb 20 08:57:41 2007] APR_NOTFOUND in ocsp_identrus_filter at ocsp_identrus.c:1911
[Tue Feb 20 08:57:41 2007] OCSP request processed.
[Tue Feb 20 08:57:41 2007] APR_PAPI_OCSP_STATUS_MALFORMED_REQUEST in process_ocsp_single_request_extensions at ocsp_asn1.c:1583
[Tue Feb 20 08:57:41 2007] APR_PAPI_OCSP_STATUS_MALFORMED_REQUEST in decodeRequestList at ocsp_asn1.c:1817
[Tue Feb 20 08:57:41 2007] APR_PAPI_OCSP_STATUS_MALFORMED_REQUEST in decodeTBSRequest at ocsp_asn1.c:1981
[Tue Feb 20 08:57:41 2007] APR_PAPI_OCSP_STATUS_MALFORMED_REQUEST in decodeOCSPRequest at ocsp_asn1.c:2263
[Tue Feb 20 08:57:41 2007] OCSP request processed.

If the order of the locators is swapped round it works ok.


Cause
VM always tries to use the first extension, in this case one specifically for Identrus that VM does not understand.
Resolution
A fix has been produced that means VM will seach through the extensions to find an extension that it knows, in this case -ocsp
Don't see what you're looking for?