commit 2d921c5be3b787cf726f373e1c07fa4cf0c99105
author Branko Čibej <brane@apache.org> Sun Apr 29 09:15:49 2018 +0000
committer Branko Čibej <brane@apache.org> Sun Apr 29 09:15:49 2018 +0000
tree dc9fd5fa4dfbf2a5e8be666b9f4ae1b0735f7ade
parent 98c7a6785b5419df6faa9bb56917308afe555f61

On the ocsp-verification branch: Added test cases for OCSP response
parsing and verification.

* test/certs/create_certs.py
  (create_cert): Add option to add the 'OCSP signing' extension.
  (__main__): Generate an OCSP responder certificate.
* test/certs: Regenerated all certificates and private keys.

* test/test_ssl.c: Include OpenSSL headers for OCSP tests.
  (test_ssl_cert_certificate): Update certificate info.
  (load_ocsp_test_certs): Optionally load root CA and OCSP signer certs.
  (create_ocsp_response,
   pkey_password_cb,
   verify_ocsp_response): New helper functions.
  (test_ssl_ocsp_request_create,
   test_ssl_ocsp_request_export_import): Update call to load_ocsp_test_certs.
  (test_ssl_ocsp_verify_response,
   test_ssl_ocsp_verify_response_no_nonce,
   test_ssl_ocsp_verify_response_missing_nonce,
   test_ssl_ocsp_verify_response_ignore_missing_nonce,
   test_ssl_ocsp_verify_response_no_signer,
   test_ssl_ocsp_verify_response_wrong_signer): New tests.


git-svn-id: https://svn.apache.org/repos/asf/serf/branches/ocsp-verification@1830497 13f79535-47bb-0310-9956-ffa450edef68