Age | Commit message (Collapse) | Author |
|
|
|
Server:
Honor environment variable as well as running_in_test_harness in permitting bogus staplings
Update server tests
Add "-ocsp" option to client-ssl.
Server side: add verification of stapled status.
First cut server-mode ocsp testing.
Fix some uninitialized ocsp-related data.
Client (new):
Verify stapling using only the chain that verified the server cert, not any acceptable chain.
Add check for multiple responses in a stapling, which is not handled
Refuse verification on expired and revoking staplings.
Handle OCSP client refusal on lack of stapling from server.
More fixing in client OCSP: use the server cert signing chain to verify the OCSP info.
Add transport hosts_require_ocsp option.
Log stapling responses.
Start on tests for client-side.
Testing support:
Add CRL generation code and documentation update
Initial CA & certificate set for testing.
BUGFIX:
Once a single OCSP response has been extracted the validation
routine return code is no longer about the structure, but the actual
returned OCSP status.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
I have also de-CVSed the ABOUT files and cleaned up a few
introductory comments.
|
|
Failed at test 178.
|
|
sudo needs to permit sudo w/o a TTY.
The config file used is the same for each test, the individual config
files are made available under a particular name. Correct that advice.
|
|
There's a lot of copying of stdin to stdout when using readline for -be,
which breaks the test suite. The suite now runs well enough for me to
fix the stuff broken by the debugging changes I introduced.
|
|
If we've *dropped* privilege, it's okay to not abort if setgid fails.
Document some of what's now needed for the test suite.
Adjust the test suide for better post-4.73 compat.
|
|
user the same. restrict it in runtest and add a note about it in the README
|
|
|
|
patches for eximstats and eximon (his patch dealt with exigrep).
|
|
programs.
|
|
commands.
|
|
by Martin Mrazik.
|
|
quota calculations.
|
|
system; make Exim output off_t size for -bV so tests can be appropriate.
|
|
|