# OCSP stapling, server # # # exim -z '1: Server sends good staple on request' **** # exim -bd -oX PORT_D -DSERVER=server \ -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp **** client-gnutls \ -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \ HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 ??? 220 ehlo rhu.barb ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250 starttls ??? 220 helo test ??? 250 mail from:<userx@test.ex> ??? 250 rcpt to:<userx@test.ex> ??? 250 quit ??? 221 **** killdaemon # # # exim -z '2: Server does not staple an outdated response' **** # This test fails on older GnuTLS versions, which do not check the resp on the server # exim -bd -oX PORT_D -DSERVER=server \ -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp **** client-gnutls -ocsp aux-fixed/exim-ca/expired1.example.com/CA.pem HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 ??? 220 ehlo rhu.barb ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250 starttls ??? 454 **** killdaemon # # # # # exim -z '3: Server does not staple a response for a revoked cert' **** # This test fails on older GnuTLS versions, which do not check the resp on the server # exim -bd -oX PORT_D -DSERVER=server \ -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp **** client-gnutls \ -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \ HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 ??? 220 ehlo rhu.barb ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250 starttls ??? 454 **** killdaemon # # # # # exim -z '4: Connection functions when server is prepared to staple but client does not request it' **** # exim -bd -oX PORT_D -DSERVER=server \ -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp **** # client-gnutls \ HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 ??? 220 ehlo rhu.barb ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250 starttls ??? 220 ehlo rhu.barb.tls ??? 250- ??? 250- ??? 250- ??? 250- ??? 250- ??? 250 quit **** killdaemon # # # # #