<p>Does anybody know of a tool to test OCSP responses? Preferably, something that can be used from a Windows Command-line and/or can be included (easily) in a Java/python program </p>

[{'answer_id': 71674, 'author': 'Alexey Feldgendler', 'author_id': 10682, 'author_profile': 'https://Stackoverflow.com/users/10682', 'pm_score': 1, 'selected': False, 'text': '<p>The newpki client claims to be able to do that.\n<a href="http://www.newpki.org/" rel="nofollow noreferrer">http://www.newpki.org/</a></p>\n'}, {'answer_id': 71686, 'author': 'DustinB', 'author_id': 7888, 'author_profile': 'https://Stackoverflow.com/users/7888', 'pm_score': 0, 'selected': False, 'text': '<p>Can you test it over HTTP as described in the specs in Appendix A?  If so, then you can use any web test util.  Since you mentioned Java, <a href="http://jakarta.apache.org/jmeter/" rel="nofollow noreferrer">JMeter</a> comes to mind.  With JMeter, you can create your java code to do validation, etc and re-use it in your test cases.</p>\n\n<p>Can you use something other than CMD line, such as a BASH script via <a href="http://cygwin.com" rel="nofollow noreferrer">Cygwin</a>?</p>\n\n<p>You\'d still have to script some things to validate the test, perhaps using <a href="http://www.openssl.org/docs/apps/ocsp.html" rel="nofollow noreferrer">openssl</a>?</p>\n\n<pre>\ncurl http://some.ocsp.url/  > resp.der\nopenssl ocsp -respin resp.der -text\n</pre>\n\n<p>See page <a href="http://www.ietf.org/rfc/rfc2560.txt" rel="nofollow noreferrer">http://www.ietf.org/rfc/rfc2560.txt</a></p>\n'}, {'answer_id': 72957, 'author': 'JJarava', 'author_id': 12344, 'author_profile': 'https://Stackoverflow.com/users/12344', 'pm_score': 3, 'selected': True, 'text': '<p>Looking a bit more, I think I\'ve found some answers:</p>\n\n<p>a) OpenSSL at the rescue:</p>\n\n<pre><code>openssl ocsp -whatever\n</code></pre>\n\n<p>For more info, <a href="http://www.openssl.org/docs/apps/ocsp.html" rel="nofollow noreferrer">http://www.openssl.org/docs/apps/ocsp.html</a></p>\n\n<p>b) <a href="http://www.openvalidation.org/" rel="nofollow noreferrer">http://www.openvalidation.org/</a> is another way of testing a cert. And via its links, I got to:</p>\n\n<ul>\n<li><a href="http://security.polito.it/tools/ocsp/" rel="nofollow noreferrer">http://security.polito.it/tools/ocsp/</a></li>\n<li>Ascertia OCSP Client tool (<a href="http://www.ascertia.com/products/ocsptool/" rel="nofollow noreferrer">http://www.ascertia.com/products/ocsptool/</a>)</li>\n<li>Ascertia OCSP Crusher tool (an OCSP load generator) (<a href="http://www.ascertia.com/products/ocspCrusher/" rel="nofollow noreferrer">http://www.ascertia.com/products/ocspCrusher/</a>)</li>\n</ul>\n\n<p>Thanks to all the answers!</p>\n'}, {'answer_id': 108678, 'author': 'Community', 'author_id': -1, 'author_profile': 'https://Stackoverflow.com/users/-1', 'pm_score': 1, 'selected': False, 'text': '<p>bouncycastle has a Java crypto-provider and support for OCSP requests and responses. The differences between OCSPReq and OCSPRequest and OCSPResp and OCSPResponse class are a little confusing, though.</p>\n'}, {'answer_id': 3910224, 'author': 'ohe', 'author_id': 335247, 'author_profile': 'https://Stackoverflow.com/users/335247', 'pm_score': 1, 'selected': False, 'text': '<p>Here is a good ressource to have a simple OCSP Client or OCSP Responder with OpenSSL : <a href="http://backreference.org/2010/05/09/ocsp-verification-with-openssl/" rel="nofollow">http://backreference.org/2010/05/09/ocsp-verification-with-openssl/</a></p>\n'}]
['https://Stackoverflow.com/questions/71468', 'https://Stackoverflow.com', 'https://Stackoverflow.com/users/-1/']