Encode correctly OCSP NONCE extension

WE2-819

Signed-off-by: Raul Metsma <[email protected]>

Author: metsma

src/main/java/eu/webeid/security/validator/ocsp/OcspRequestBuilder.java

@@ -68,7 +68,7 @@ public OCSPReq build() throws OCSPException {
             try {
                 addNonce(builder);
             } catch (IOException e) {
-                throw new OCSPException("Failed to generate OCSP nonce extension", e);
+                throw new OCSPException("Failed to generate OCSP NONCE extension", e);
             }
         }
 
@@ -81,7 +81,7 @@ private void addNonce(OCSPReqBuilder builder) throws IOException {
 
         final Extension[] extensions = new Extension[]{
             new Extension(OCSPObjectIdentifiers.id_pkix_ocsp_nonce, false,
-                // Follow OpenSSL OCSP nonce encoding convention and add double octet string header.
+                new DEROctetString(new DEROctetString(nonce)))
                 new DEROctetString(new DEROctetString(nonce)))
         };
         builder.setRequestExtensions(new Extensions(extensions));