commit 576c42c9caa7aa8654b7185709292c18f0b22eb2
author remm <remm@apache.org> Fri Oct 10 15:39:10 2025 +0200
committer remm <remm@apache.org> Fri Oct 10 15:41:03 2025 +0200
tree 968bb44852b3b2c4a72840f85220fe241ec6894b
parent 4c9d9e09b5e91b2fedcb9a60f24aa23d80b7a1d8

Test OCSP with BoringSSL and LibreSSL

BoringSSL does not work anymore due to:
https://boringssl.googlesource.com/boringssl/+/1749dc9a70fd9cbb3221c47ef30cffd6fda06846

test/org/apache/tomcat/util/net/ocsp/TestOcspIntegration.java

diff --git a/test/org/apache/tomcat/util/net/ocsp/TestOcspIntegration.java b/test/org/apache/tomcat/util/net/ocsp/TestOcspIntegration.java
index 6554deb..5019ffb 100644
--- a/test/org/apache/tomcat/util/net/ocsp/TestOcspIntegration.java
+++ b/test/org/apache/tomcat/util/net/ocsp/TestOcspIntegration.java
@@ -74,6 +74,7 @@
 import org.apache.tomcat.util.net.SSLHostConfig;
 import org.apache.tomcat.util.net.SSLHostConfigCertificate;
 import org.apache.tomcat.util.net.TesterSupport;
+import org.apache.tomcat.util.net.openssl.OpenSSLStatus;
 
 import com.sun.net.httpserver.Headers;
 import com.sun.net.httpserver.HttpServer;
@@ -205,6 +206,10 @@
     private int testOCSP(String pathToOcspResponse, boolean serverSideVerificationEnabled,
             boolean clientSideOcspVerificationEnabled, boolean clientDiscoversResponderFromAIA, int ocspResponderPort)
             throws Exception {
+
+        Assume.assumeFalse("BoringSSL does not allow supporting OCSP",
+                TesterSupport.isOpenSSLVariant(sslImplementationName, OpenSSLStatus.Name.BORINGSSL));
+
         File certificateFile = new File(getPath(SERVER_CERTIFICATE_PATH));
         File certificateKeyFile = new File(getPath(SERVER_CERTIFICATE_KEY_PATH));
         File certificateChainFile = new File(getPath(CA_CERTIFICATE_PATH));