# OCSP stapling, client
#
#
-# Client works when we don't demand OCSP stapling
-exim -bd -oX PORT_D -DSERVER=server -DOCSP=""
+# Client works when we request but don't require OCSP stapling and none comes
+exim -bd -oX PORT_D -DSERVER=server -DOPT=""
****
-exim nostaple@test.ex
+exim norequire@test.ex
test message.
****
sleep 1
#
#
#
-# Client accepts good stapled info
+# Client works when we don't request OCSP stapling
exim -bd -oX PORT_D -DSERVER=server \
- -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
+ -DOPT=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
+****
+exim nostaple@test.ex
+test message.
****
+millisleep 500
+#
+#
+#
+#
+# Client accepts good stapled info
exim CALLER@test.ex
test message.
****
#
#
#
-# Client fails on lack of requested stapled info
-exim -bd -oX PORT_D -DSERVER=server -DOCSP=""
+# Client fails on lack of required stapled info
+exim -bd -oX PORT_D -DSERVER=server -DOPT=""
****
exim CALLER@test.ex
test message.
#
#
# Client fails on revoked stapled info
+sudo rm DIR/spool/db/retry*
EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server \
- -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp
+ -DOPT=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp
****
exim CALLER@test.ex
test message.
#
#
# Client fails on expired stapled info
+sudo rm DIR/spool/db/retry*
EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server \
- -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp
+ -DOPT=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp
****
exim CALLER@test.ex
test message.