mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-11-21 01:15:20 +08:00
Code Issues Packages Projects Releases Wiki Activity
bdcb1a2cf5
openssl/test/tocsp

149 lines
5.5 KiB
Plaintext
Raw Normal View History

Fix OCSP checking.
2012-12-08 02:47:47 +08:00
#!/bin/sh
cmd='../util/shlib_wrap.sh ../apps/openssl'
consistent test-start logging Output a consistent "start" marker for each test. Remove "2>/dev/null" from Makefile command lines. Add OPENSSL_CONFIG=/dev/null for places where it's needed, in order to suppress a warning message from the openssl CLI. Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-04-09 00:28:15 +08:00
OPENSSL_CONF=/dev/null ; export OPENSSL_CONF
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
ocspdir="ocsp-tests"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
# 17 December 2012 so we don't get certificate expiry errors.
check_time="-attime 1355875200"
test_ocsp () {
$cmd base64 -d -in $ocspdir/$1 | \
Fix tocsp: we don't need -trust_other any more. Fix typo.
2012-12-22 02:32:33 +08:00
$cmd ocsp -respin - -partial_chain $check_time \
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
-CAfile $ocspdir/$2 -verify_other $ocspdir/$2 -CApath /dev/null
[ $? != $3 ] && exit 1
}
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== VALID OCSP RESPONSES ==="
echo "NON-DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND1.ors ND1_Issuer_ICA.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND2.ors ND2_Issuer_Root.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND3.ors ND3_Issuer_Root.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D1.ors D1_Issuer_ICA.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D2.ors D2_Issuer_Root.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D3.ors D3_Issuer_Root.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== INVALID SIGNATURE on the OCSP RESPONSE ==="
echo "NON-DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISOP_ND1.ors ND1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISOP_ND2.ors ND2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISOP_ND3.ors ND3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISOP_D1.ors D1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISOP_D2.ors D2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISOP_D3.ors D3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== WRONG RESPONDERID in the OCSP RESPONSE ==="
echo "NON-DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WRID_ND1.ors ND1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WRID_ND2.ors ND2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WRID_ND3.ors ND3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WRID_D1.ors D1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WRID_D2.ors D2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WRID_D3.ors D3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== WRONG ISSUERNAMEHASH in the OCSP RESPONSE ==="
echo "NON-DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WINH_ND1.ors ND1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WINH_ND2.ors ND2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WINH_ND3.ors ND3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WINH_D1.ors D1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WINH_D2.ors D2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WINH_D3.ors D3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== WRONG ISSUERKEYHASH in the OCSP RESPONSE ==="
echo "NON-DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WIKH_ND1.ors ND1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WIKH_ND2.ors ND2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WIKH_ND3.ors ND3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WIKH_D1.ors D1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WIKH_D2.ors D2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WIKH_D3.ors D3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== WRONG KEY in the DELEGATED OCSP SIGNING CERTIFICATE ==="
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WKDOSC_D1.ors D1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WKDOSC_D2.ors D2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp WKDOSC_D3.ors D3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== INVALID SIGNATURE on the DELEGATED OCSP SIGNING CERTIFICATE ==="
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISDOSC_D1.ors D1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISDOSC_D2.ors D2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ISDOSC_D3.ors D3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== WRONG SUBJECT NAME in the ISSUER CERTIFICATE ==="
echo "NON-DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND1.ors WSNIC_ND1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND2.ors WSNIC_ND2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND3.ors WSNIC_ND3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D1.ors WSNIC_D1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D2.ors WSNIC_D2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D3.ors WSNIC_D3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== WRONG KEY in the ISSUER CERTIFICATE ==="
echo "NON-DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND1.ors WKIC_ND1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND2.ors WKIC_ND2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND3.ors WKIC_ND3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D1.ors WKIC_D1_Issuer_ICA.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D2.ors WKIC_D2_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D3.ors WKIC_D3_Issuer_Root.pem 1
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "=== INVALID SIGNATURE on the ISSUER CERTIFICATE ==="
# Expect success, because we're explicitly trusting the issuer certificate.
echo "NON-DELEGATED; Intermediate CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND1.ors ISIC_ND1_Issuer_ICA.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND2.ors ISIC_ND2_Issuer_Root.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "NON-DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp ND3.ors ISIC_ND3_Issuer_Root.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Intermediate CA -> EE"
Fix tocsp: we don't need -trust_other any more. Fix typo.
2012-12-22 02:32:33 +08:00
test_ocsp D1.ors ISIC_D1_Issuer_ICA.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> Intermediate CA"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D2.ors ISIC_D2_Issuer_Root.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "DELEGATED; Root CA -> EE"
Update test OCSP script "tocsp" to use shell functions and to use December 17th as check date to avoid certificate expiry errors.
2012-12-21 02:48:11 +08:00
test_ocsp D3.ors ISIC_D3_Issuer_Root.pem 0
Fix OCSP checking.
2012-12-08 02:47:47 +08:00
echo "ALL OCSP TESTS SUCCESSFUL"
exit 0
Reference in New Issue Copy Permalink