Show OCSP checking via CertManager

[anhu]

No description provided.

[anhu]

This did not lean heavily on AI. It started the example, but I basically re-wrote the whole thing.

[dgarske]

~/GitHub/wolfssl-examples$ openssl ocsp -port 22221 -ndays 365       -index certs/ocsp/index-intermediate1-ca-issued-certs.txt       -rsigner certs/ocsp/ocsp-responder-cert.pem       -rkey certs/ocsp/ocsp-responder-key.pem       -CA certs/ocsp/intermediate1-ca-cert.pem
ACCEPT 0.0.0.0:22221 PID=2110825
Could not open file or uri for loading responder certificate from certs/ocsp/ocsp-responder-cert.pem
40E7847007740000:error:16000069:STORE routines:ossl_store_get0_loader_int:unregistered scheme:../crypto/store/store_register.c:237:scheme=file
40E7847007740000:error:80000002:system library:file_open:No such file or directory:../providers/implementations/storemgmt/file_store.c:267:calling stat(certs/ocsp/ocsp-responder-cert.pem)
Unable to load responder certificate
Error loading responder certificate

~/GitHub/wolfssl-examples$ find . -name intermediate1-ca-cert.pem
./ocsp/stapling/client-certs/intermediate1-ca-cert.pem

This is in a few places

$ ./certverify_ocsp
Loaded root CA: ../../wolfssl/certs/ocsp/root-ca-cert.pem
Loaded intermediate CA: ../../wolfssl/certs/ocsp/intermediate1-ca-cert.pem
OCSP checking enabled
Verifying certificate: ../../wolfssl/certs/ocsp/server1-cert.pem
Certificate chain verification: PASSED
Performing OCSP check...
OCSP check failed (-407): Invalid OCSP Status Error

OCSP lookup failed!
Make sure the OCSP responder is running:
  cd <wolfssl-dir>
  openssl ocsp -port 22221 -ndays 365 \
      -index certs/ocsp/index-intermediate1-ca-issued-certs.txt \
      -rsigner certs/ocsp/ocsp-responder-cert.pem \
      -rkey certs/ocsp/ocsp-responder-key.pem \
      -CA certs/ocsp/intermediate1-ca-cert.pem

[anhu]

Oops. I noticed in the README.md the executable name is different. Also I specify "From the wolfSSL library source code directory" ....Perhaps I should be clearer about the directory layout expected. This should all be easy to clean up. Stay tuned.