diff options
author | William Joye <wjoye@cfa.harvard.edu> | 2017-05-02 16:40:01 (GMT) |
---|---|---|
committer | William Joye <wjoye@cfa.harvard.edu> | 2017-05-02 16:40:01 (GMT) |
commit | 0a2b8b8e0bc2e91a9f10659b30e2e4f5b79ce692 (patch) | |
tree | 3d0871d05cfd11f60b86829d2d93704034dad24e /openssl/test/tocsp | |
parent | e9abe0dba896d2b0fc22301588336e89ff246ba7 (diff) | |
download | blt-0a2b8b8e0bc2e91a9f10659b30e2e4f5b79ce692.zip blt-0a2b8b8e0bc2e91a9f10659b30e2e4f5b79ce692.tar.gz blt-0a2b8b8e0bc2e91a9f10659b30e2e4f5b79ce692.tar.bz2 |
reinstall
Diffstat (limited to 'openssl/test/tocsp')
-rw-r--r-- | openssl/test/tocsp | 147 |
1 files changed, 0 insertions, 147 deletions
diff --git a/openssl/test/tocsp b/openssl/test/tocsp deleted file mode 100644 index 48e81bf..0000000 --- a/openssl/test/tocsp +++ /dev/null @@ -1,147 +0,0 @@ -#!/bin/sh - -cmd='../util/shlib_wrap.sh ../apps/openssl' -ocspdir="ocsp-tests" -# 17 December 2012 so we don't get certificate expiry errors. -check_time="-attime 1355875200" - -test_ocsp () { - - $cmd base64 -d -in $ocspdir/$1 | \ - $cmd ocsp -respin - -partial_chain $check_time -trusted_first \ - -CAfile $ocspdir/$2 -verify_other $ocspdir/$2 -CApath /dev/null - [ $? != $3 ] && exit 1 -} - - -echo "=== VALID OCSP RESPONSES ===" -echo "NON-DELEGATED; Intermediate CA -> EE" -test_ocsp ND1.ors ND1_Issuer_ICA.pem 0 -echo "NON-DELEGATED; Root CA -> Intermediate CA" -test_ocsp ND2.ors ND2_Issuer_Root.pem 0 -echo "NON-DELEGATED; Root CA -> EE" -test_ocsp ND3.ors ND3_Issuer_Root.pem 0 -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp D1.ors D1_Issuer_ICA.pem 0 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp D2.ors D2_Issuer_Root.pem 0 -echo "DELEGATED; Root CA -> EE" -test_ocsp D3.ors D3_Issuer_Root.pem 0 - -echo "=== INVALID SIGNATURE on the OCSP RESPONSE ===" -echo "NON-DELEGATED; Intermediate CA -> EE" -test_ocsp ISOP_ND1.ors ND1_Issuer_ICA.pem 1 -echo "NON-DELEGATED; Root CA -> Intermediate CA" -test_ocsp ISOP_ND2.ors ND2_Issuer_Root.pem 1 -echo "NON-DELEGATED; Root CA -> EE" -test_ocsp ISOP_ND3.ors ND3_Issuer_Root.pem 1 -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp ISOP_D1.ors D1_Issuer_ICA.pem 1 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp ISOP_D2.ors D2_Issuer_Root.pem 1 -echo "DELEGATED; Root CA -> EE" -test_ocsp ISOP_D3.ors D3_Issuer_Root.pem 1 - -echo "=== WRONG RESPONDERID in the OCSP RESPONSE ===" -echo "NON-DELEGATED; Intermediate CA -> EE" -test_ocsp WRID_ND1.ors ND1_Issuer_ICA.pem 1 -echo "NON-DELEGATED; Root CA -> Intermediate CA" -test_ocsp WRID_ND2.ors ND2_Issuer_Root.pem 1 -echo "NON-DELEGATED; Root CA -> EE" -test_ocsp WRID_ND3.ors ND3_Issuer_Root.pem 1 -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp WRID_D1.ors D1_Issuer_ICA.pem 1 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp WRID_D2.ors D2_Issuer_Root.pem 1 -echo "DELEGATED; Root CA -> EE" -test_ocsp WRID_D3.ors D3_Issuer_Root.pem 1 - -echo "=== WRONG ISSUERNAMEHASH in the OCSP RESPONSE ===" -echo "NON-DELEGATED; Intermediate CA -> EE" -test_ocsp WINH_ND1.ors ND1_Issuer_ICA.pem 1 -echo "NON-DELEGATED; Root CA -> Intermediate CA" -test_ocsp WINH_ND2.ors ND2_Issuer_Root.pem 1 -echo "NON-DELEGATED; Root CA -> EE" -test_ocsp WINH_ND3.ors ND3_Issuer_Root.pem 1 -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp WINH_D1.ors D1_Issuer_ICA.pem 1 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp WINH_D2.ors D2_Issuer_Root.pem 1 -echo "DELEGATED; Root CA -> EE" -test_ocsp WINH_D3.ors D3_Issuer_Root.pem 1 - -echo "=== WRONG ISSUERKEYHASH in the OCSP RESPONSE ===" -echo "NON-DELEGATED; Intermediate CA -> EE" -test_ocsp WIKH_ND1.ors ND1_Issuer_ICA.pem 1 -echo "NON-DELEGATED; Root CA -> Intermediate CA" -test_ocsp WIKH_ND2.ors ND2_Issuer_Root.pem 1 -echo "NON-DELEGATED; Root CA -> EE" -test_ocsp WIKH_ND3.ors ND3_Issuer_Root.pem 1 -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp WIKH_D1.ors D1_Issuer_ICA.pem 1 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp WIKH_D2.ors D2_Issuer_Root.pem 1 -echo "DELEGATED; Root CA -> EE" -test_ocsp WIKH_D3.ors D3_Issuer_Root.pem 1 - -echo "=== WRONG KEY in the DELEGATED OCSP SIGNING CERTIFICATE ===" -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp WKDOSC_D1.ors D1_Issuer_ICA.pem 1 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp WKDOSC_D2.ors D2_Issuer_Root.pem 1 -echo "DELEGATED; Root CA -> EE" -test_ocsp WKDOSC_D3.ors D3_Issuer_Root.pem 1 - -echo "=== INVALID SIGNATURE on the DELEGATED OCSP SIGNING CERTIFICATE ===" -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp ISDOSC_D1.ors D1_Issuer_ICA.pem 1 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp ISDOSC_D2.ors D2_Issuer_Root.pem 1 -echo "DELEGATED; Root CA -> EE" -test_ocsp ISDOSC_D3.ors D3_Issuer_Root.pem 1 - -echo "=== WRONG SUBJECT NAME in the ISSUER CERTIFICATE ===" -echo "NON-DELEGATED; Intermediate CA -> EE" -test_ocsp ND1.ors WSNIC_ND1_Issuer_ICA.pem 1 -echo "NON-DELEGATED; Root CA -> Intermediate CA" -test_ocsp ND2.ors WSNIC_ND2_Issuer_Root.pem 1 -echo "NON-DELEGATED; Root CA -> EE" -test_ocsp ND3.ors WSNIC_ND3_Issuer_Root.pem 1 -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp D1.ors WSNIC_D1_Issuer_ICA.pem 1 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp D2.ors WSNIC_D2_Issuer_Root.pem 1 -echo "DELEGATED; Root CA -> EE" -test_ocsp D3.ors WSNIC_D3_Issuer_Root.pem 1 - -echo "=== WRONG KEY in the ISSUER CERTIFICATE ===" -echo "NON-DELEGATED; Intermediate CA -> EE" -test_ocsp ND1.ors WKIC_ND1_Issuer_ICA.pem 1 -echo "NON-DELEGATED; Root CA -> Intermediate CA" -test_ocsp ND2.ors WKIC_ND2_Issuer_Root.pem 1 -echo "NON-DELEGATED; Root CA -> EE" -test_ocsp ND3.ors WKIC_ND3_Issuer_Root.pem 1 -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp D1.ors WKIC_D1_Issuer_ICA.pem 1 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp D2.ors WKIC_D2_Issuer_Root.pem 1 -echo "DELEGATED; Root CA -> EE" -test_ocsp D3.ors WKIC_D3_Issuer_Root.pem 1 - -echo "=== INVALID SIGNATURE on the ISSUER CERTIFICATE ===" -# Expect success, because we're explicitly trusting the issuer certificate. -echo "NON-DELEGATED; Intermediate CA -> EE" -test_ocsp ND1.ors ISIC_ND1_Issuer_ICA.pem 0 -echo "NON-DELEGATED; Root CA -> Intermediate CA" -test_ocsp ND2.ors ISIC_ND2_Issuer_Root.pem 0 -echo "NON-DELEGATED; Root CA -> EE" -test_ocsp ND3.ors ISIC_ND3_Issuer_Root.pem 0 -echo "DELEGATED; Intermediate CA -> EE" -test_ocsp D1.ors ISIC_D1_Issuer_ICA.pem 0 -echo "DELEGATED; Root CA -> Intermediate CA" -test_ocsp D2.ors ISIC_D2_Issuer_Root.pem 0 -echo "DELEGATED; Root CA -> EE" -test_ocsp D3.ors ISIC_D3_Issuer_Root.pem 0 - -echo "ALL OCSP TESTS SUCCESSFUL" -exit 0 |