1 # OCSP stapling, server
5 exim -z '1: Server sends good staple on request'
8 exim -bd -oX PORT_D -DSERVER=server \
9 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
12 -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \
13 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
27 mail from:<userx@test.ex>
29 rcpt to:<userx@test.ex>
38 exim -z '2: Server does not staple an outdated response'
40 # This test fails on older GnuTLS versions, which do not check the resp on the server
42 exim -bd -oX PORT_D -DSERVER=server \
43 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp
45 client-gnutls -ocsp aux-fixed/exim-ca/expired1.example.com/CA.pem HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
64 exim -z '3: Server does not staple a response for a revoked cert'
66 # This test fails on older GnuTLS versions, which do not check the resp on the server
68 exim -bd -oX PORT_D -DSERVER=server \
69 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp
72 -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \
73 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
92 exim -z '4: Connection functions when server is prepared to staple but client does not request it'
95 exim -bd -oX PORT_D -DSERVER=server \
96 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
100 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2