From 86ede124f0ce622b4f73e05504abc11fece021e3 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Thu, 17 Oct 2019 21:45:32 +0100 Subject: OpenSSL: full-chain OCSP stapling. Bug 1466 --- test/scripts/5655-OCSP-GnuTLS-1.3/5655 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'test/scripts/5655-OCSP-GnuTLS-1.3') diff --git a/test/scripts/5655-OCSP-GnuTLS-1.3/5655 b/test/scripts/5655-OCSP-GnuTLS-1.3/5655 index 25ebdfd6b..1df75fbf9 100644 --- a/test/scripts/5655-OCSP-GnuTLS-1.3/5655 +++ b/test/scripts/5655-OCSP-GnuTLS-1.3/5655 @@ -7,7 +7,6 @@ sudo chown -R EXIMUSER:EXIMGROUP tmp sudo chmod -R a+rwx DIR/tmp/ocsp perl chdir 'aux-fixed/exim-ca/example.com'; -system 'cat server1.example.com/server1.example.com.ocsp.signernocert.good.resp.pem CA/Signer.ocsp.signernocert.good.resp.pem CA/CA.ocsp.signernocert.good.resp.pem > DIR/tmp/ocsp/triple.ocsp.pem'; system 'cat server1.example.com/server1.example.com.ocsp.signernocert.good.resp.pem CA/Signer.ocsp.signernocert.revoked.resp.pem > DIR/tmp/ocsp/double_r.ocsp.pem'; **** # @@ -15,7 +14,7 @@ system 'cat server1.example.com/server1.example.com.ocsp.signernocert.good.resp. exim -z '1: TLS1.2 Server sends good leaf-staple on request, to client requiring RSA auth' **** # -exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.2 +sudo exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.2 **** # exim -odf -DOPT=rsa -DLIMIT=TLS1.2 rsa.auth@test.ex @@ -29,6 +28,7 @@ killdaemon exim -z '2: TLS1.3 Server sends good 3-element staple on request, to client requiring RSA auth' **** # +# Prefix with sudo to get SSLKEYLOGFILE to work. Only works on the server. exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.3 **** exim -odf -DOPT=rsa rsa.auth@test.ex -- cgit v1.2.3