From: Jeremy Harris Date: Sat, 16 Dec 2017 20:45:18 +0000 (+0000) Subject: Testsuite: restore generation of OCSP status for EC certs X-Git-Tag: exim-4_91_RC1~148^2~5 X-Git-Url: https://git.exim.org/exim.git/commitdiff_plain/b66afe222257742c497fc2c5b498434b9e52b6b4 Testsuite: restore generation of OCSP status for EC certs Broken-by: 854586e149 --- diff --git a/test/aux-fixed/exim-ca/genall b/test/aux-fixed/exim-ca/genall index 8388cae43..4a6a7aabe 100755 --- a/test/aux-fixed/exim-ca/genall +++ b/test/aux-fixed/exim-ca/genall @@ -192,6 +192,38 @@ do cat $SPFX.pem example.$tld/CA/Signer.pem >$SPFX.chain.pem done +#### + # create OCSP reqs & resps + CADIR=$idir/CA + #give ourselves an OSCP key to work with + pk12util -o $CADIR/OCSP.p12 -n 'OCSP Signer ec' -d $CADIR -K password -W password + openssl pkcs12 -in $CADIR/OCSP.p12 -passin pass:password -passout pass:password -nodes -nocerts -out $CADIR/OCSP.key + + # create some index files for the ocsp responder to work with +# tab-sep +# 0: Revoked/Expired/Valid letter +# 1: Expiry date (ASN1_UTCTIME) +# 2: Revocation date +# 3: Serial no. (unique) +# 4: file +# 5: DN, index + + cat >$CADIR/index.valid.txt <