OpenSSL: full-chain OCSP stapling. Bug 1466

[users/jgh/exim.git] / test / scripts / 5655-OCSP-GnuTLS-1.3 / 5655

diff --git a/test/scripts/5655-OCSP-GnuTLS-1.3/5655 b/test/scripts/5655-OCSP-GnuTLS-1.3/5655
index 25ebdfd6b186e3f34fec57f9216de92a3805da2b..1df75fbf9129542b2093d74b693a2c55c54f841c 100644 (file)
--- a/test/scripts/5655-OCSP-GnuTLS-1.3/5655
+++ b/test/scripts/5655-OCSP-GnuTLS-1.3/5655
@@ -7,7 +7,6 @@ sudo chown -R EXIMUSER:EXIMGROUP tmp
 sudo chmod -R a+rwx DIR/tmp/ocsp
 perl
 chdir 'aux-fixed/exim-ca/example.com';
-system 'cat server1.example.com/server1.example.com.ocsp.signernocert.good.resp.pem CA/Signer.ocsp.signernocert.good.resp.pem CA/CA.ocsp.signernocert.good.resp.pem > DIR/tmp/ocsp/triple.ocsp.pem';
 system 'cat server1.example.com/server1.example.com.ocsp.signernocert.good.resp.pem CA/Signer.ocsp.signernocert.revoked.resp.pem > DIR/tmp/ocsp/double_r.ocsp.pem';
 ****
 #
@@ -15,7 +14,7 @@ system 'cat server1.example.com/server1.example.com.ocsp.signernocert.good.resp.
 exim -z '1: TLS1.2 Server sends good leaf-staple on request, to client requiring RSA auth'
 ****
 #
-exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.2
+sudo exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.2
 ****
 #
 exim -odf -DOPT=rsa -DLIMIT=TLS1.2 rsa.auth@test.ex
@@ -29,6 +28,7 @@ killdaemon
 exim -z '2: TLS1.3 Server sends good 3-element staple on request, to client requiring RSA auth'
 ****
 #
+# Prefix with sudo to get SSLKEYLOGFILE to work.  Only works on the server.
 exim -bd -oX PORT_D -DSERVER=server -DLIMIT=TLS1.3
 ****
 exim -odf -DOPT=rsa rsa.auth@test.ex