diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2016-11-02 21:25:49 +0000 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2016-11-02 21:41:03 +0000 |
| commit | e5b60be7f6f924ea9730f4829c2eb8d955cb14bf (patch) | |
| tree | 494461f9322fb13b45887fd009ffd394d12fc32a /test/scripts/5600-OCSP-OpenSSL | |
| parent | 74e2fb4be74f740608476cd042061000e198cc3d (diff) | |
Testsuite: replicate testcases for LE OCSP
Diffstat (limited to 'test/scripts/5600-OCSP-OpenSSL')
| -rw-r--r-- | test/scripts/5600-OCSP-OpenSSL/5610 | 115 | ||||
| -rw-r--r-- | test/scripts/5600-OCSP-OpenSSL/5611 | 77 |
2 files changed, 192 insertions, 0 deletions
diff --git a/test/scripts/5600-OCSP-OpenSSL/5610 b/test/scripts/5600-OCSP-OpenSSL/5610 new file mode 100644 index 000000000..c8668ea38 --- /dev/null +++ b/test/scripts/5600-OCSP-OpenSSL/5610 @@ -0,0 +1,115 @@ +# OCSP stapling, server, LE variation +# +# +# +# '1: Server sends good staple on request' +# +exim -bd -oX PORT_D -DSERVER=server \ + -DRETURN=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp +**** +client-ssl \ + -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \ + HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 +??? 220 +ehlo rhu.barb +??? 250- +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +starttls +??? 220 +mail from:<userx@test.ex> +??? 250 +rcpt to:<userx@test.ex> +??? 250 +quit +??? 221 +**** +killdaemon +# +# +# +# '2: Server does not staple an outdated response' +# +exim -bd -oX PORT_D -DSERVER=server \ + -DRETURN=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp +**** +# XXX test sequence might not be quite right; this is for a server refusal +# and we're expecting a client refusal. +client-ssl -ocsp aux-fixed/exim-ca/expired1.example.com/CA.pem HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 +??? 220 +ehlo rhu.barb +??? 250- +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +starttls +??? 220 +**** +killdaemon +# +# +# +# +# +# '3: Server does not staple a response for a revoked cert' +# +exim -bd -oX PORT_D -DSERVER=server \ + -DRETURN=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp +**** +client-ssl \ + -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \ + HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 +??? 220 +ehlo rhu.barb +??? 250- +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +starttls +??? 220 +**** +killdaemon +# +# +# +# +# +# '4: Connection functions when server is prepared to staple but client does not request it' +# +exim -bd -oX PORT_D -DSERVER=server \ + -DRETURN=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp +**** +# +client-ssl \ + HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 +??? 220 +ehlo rhu.barb +??? 250- +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +starttls +??? 220 +ehlo rhu.barb.tls +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +quit +**** +killdaemon +# +# +# +# +# diff --git a/test/scripts/5600-OCSP-OpenSSL/5611 b/test/scripts/5600-OCSP-OpenSSL/5611 new file mode 100644 index 000000000..248c44219 --- /dev/null +++ b/test/scripts/5600-OCSP-OpenSSL/5611 @@ -0,0 +1,77 @@ +# OCSP stapling, client, LE variation +# +# +# Client works when we request but don't require OCSP stapling and none comes +exim -bd -oX PORT_D -DSERVER=server -DRETURN=/dev/null +**** +exim norequire@test.ex +test message. +**** +sleep 1 +killdaemon +# +# +# +# +# Client works when we don't request OCSP stapling +exim -bd -oX PORT_D -DSERVER=server \ + -DRETURN=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp +**** +exim nostaple@test.ex +test message. +**** +millisleep 500 +# +# +# +# +# Client accepts good stapled info +exim CALLER@test.ex +test message. +**** +sleep 1 +killdaemon +# +# +# +# Client fails on lack of required stapled info +exim -bd -oX PORT_D -DSERVER=server -DRETURN=/dev/null +**** +exim CALLER@test.ex +test message. +**** +sleep 1 +killdaemon +sudo rm spool/db/retry +# +# +# +# Client fails on revoked stapled info +EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server \ + -DRETURN=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp +**** +exim CALLER@test.ex +test message. +**** +sleep 1 +killdaemon +millisleep 200 +sudo rm spool/db/retry +# +# +# +# +# Client fails on expired stapled info +EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server \ + -DRETURN=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp +**** +exim CALLER@test.ex +test message. +**** +sleep 1 +killdaemon +# +# +# +# +no_msglog_check |