diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2019-09-26 19:28:53 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2019-09-26 19:34:09 +0100 |
| commit | e326959e5e455e1b46124b023e0b202e4892e501 (patch) | |
| tree | 94df809ddf19d7eb97ec9eca348836510f832b86 /test/scripts/5655-OCSP-GnuTLS-1.3 | |
| parent | 6219e0ec4a59a06b84eaabb6b3ae5d9e8f166672 (diff) | |
GnuTLS: full-chain OCSP stapling. Bug 1466
Diffstat (limited to 'test/scripts/5655-OCSP-GnuTLS-1.3')
| -rw-r--r-- | test/scripts/5655-OCSP-GnuTLS-1.3/5655 | 59 | ||||
| -rw-r--r-- | test/scripts/5655-OCSP-GnuTLS-1.3/REQUIRES | 4 |
2 files changed, 63 insertions, 0 deletions
diff --git a/test/scripts/5655-OCSP-GnuTLS-1.3/5655 b/test/scripts/5655-OCSP-GnuTLS-1.3/5655 new file mode 100644 index 000000000..25ebdfd6b --- /dev/null +++ b/test/scripts/5655-OCSP-GnuTLS-1.3/5655 @@ -0,0 +1,59 @@ +# OCSP stapling, server, multiple chain-element OCSP +# +# +# +mkdir -p DIR/tmp/ocsp +sudo chown -R EXIMUSER:EXIMGROUP tmp +sudo chmod -R a+rwx DIR/tmp/ocsp +perl +chdir 'aux-fixed/exim-ca/example.com'; +system 'cat server1.example.com/server1.example.com.ocsp.signernocert.good.resp.pem CA/Signer.ocsp.signernocert.good.resp.pem CA/CA.ocsp.signernocert.good.resp.pem > DIR/tmp/ocsp/triple.ocsp.pem'; +system 'cat server1.example.com/server1.example.com.ocsp.signernocert.good.resp.pem CA/Signer.ocsp.signernocert.revoked.resp.pem > DIR/tmp/ocsp/double_r.ocsp.pem'; +**** +# +# +exim -z '1: TLS1.2 Server sends good leaf-staple on request, to client requiring RSA auth' +**** +# +exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.2 +**** +# +exim -odf -DOPT=rsa -DLIMIT=TLS1.2 rsa.auth@test.ex +Subject: test + +. +**** +killdaemon +# +# +exim -z '2: TLS1.3 Server sends good 3-element staple on request, to client requiring RSA auth' +**** +# +exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.3 +**** +exim -odf -DOPT=rsa rsa.auth@test.ex +Subject: test + +. +**** +killdaemon +# +# +# +exim -z '3: TLS1.3 Server sends bad nonleaf staple, client detects it' +**** +# +EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.3 -DCONTROL=bad +**** +exim -odf -DOPT=rsa rsa.auth@test.ex +Subject: test + +. +**** +killdaemon +# +# +# +# +sudo rm -fr tmp/ +no_msglog_check diff --git a/test/scripts/5655-OCSP-GnuTLS-1.3/REQUIRES b/test/scripts/5655-OCSP-GnuTLS-1.3/REQUIRES new file mode 100644 index 000000000..ab5a9721d --- /dev/null +++ b/test/scripts/5655-OCSP-GnuTLS-1.3/REQUIRES @@ -0,0 +1,4 @@ +support GnuTLS +support OCSP +running IPv4 +feature _HAVE_TLS1_3 |