test/scripts/5650-OCSP-GnuTLS/5651

   1 # OCSP stapling, client
   2 #
   3 #
   4 # Client works when we request but don't require OCSP stapling and none comes
   5 exim -bd -oX PORT_D -DSERVER=server -DOPT=""
   6 ****
   7 exim norequire@test.ex
   8 test message.
   9 ****
  10 sleep 1
  11 killdaemon
  12 #
  13 #
  14 #
  15 #
  16 # Client works when we don't request OCSP stapling
  17 exim -bd -oX PORT_D -DSERVER=server \
  18  -DOPT=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
  19 ****
  20 exim nostaple@test.ex
  21 test message.
  22 ****
  23 millisleep 500
  24 #
  25 #
  26 #
  27 #
  28 # Client accepts good stapled info
  29 exim CALLER@test.ex
  30 test message.
  31 ****
  32 sleep 1
  33 killdaemon
  34 #
  35 #
  36 #
  37 # Client fails on lack of required stapled info
  38 exim -bd -oX PORT_D -DSERVER=server -DOPT=""
  39 ****
  40 exim CALLER@test.ex
  41 test message.
  42 ****
  43 sleep 1
  44 killdaemon
  45 no_msglog_check
  46 #
  47 #
  48 #
  49 # Client fails on revoked stapled info
  50 sudo rm DIR/spool/db/retry*
  51 EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server \
  52  -DOPT=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp
  53 ****
  54 exim CALLER@test.ex
  55 test message.
  56 ****
  57 sleep 1
  58 killdaemon
  59 #
  60 #
  61 #
  62 #
  63 # Client fails on expired stapled info
  64 sudo rm DIR/spool/db/retry*
  65 EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server \
  66  -DOPT=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp
  67 ****
  68 exim CALLER@test.ex
  69 test message.
  70 ****
  71 sleep 1
  72 killdaemon
  73 #
  74 #
  75 #
  76 #