Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
btwise
openssl
提交
032b3305
O
openssl
项目概览
btwise
/
openssl
通知
1
Star
0
Fork
0
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
DevOps
流水线
流水线任务
计划
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
O
openssl
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
DevOps
DevOps
流水线
流水线任务
计划
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
流水线任务
提交
Issue看板
体验新版 GitCode,发现更多精彩内容 >>
提交
032b3305
编写于
12月 20, 2012
作者:
D
Dr. Stephen Henson
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
Update test OCSP script "tocsp" to use shell functions and to use
December 17th as check date to avoid certificate expiry errors.
上级
3a3f964e
变更
1
隐藏空白更改
内联
并排
Showing
1 changed file
with
64 addition
and
114 deletion
+64
-114
test/tocsp
test/tocsp
+64
-114
未找到文件。
test/tocsp
浏览文件 @
032b3305
...
...
@@ -2,196 +2,146 @@
cmd
=
'../util/shlib_wrap.sh ../apps/openssl'
ocspdir
=
"ocsp-tests"
stdparams
=
"-trust_other -CApath /dev/null"
# 17 December 2012 so we don't get certificate expiry errors.
check_time
=
"-attime 1355875200"
test_ocsp
()
{
$cmd
base64
-d
-in
$ocspdir
/
$1
|
\
$cmd
ocsp
-respin
-
-partial_chain
-trust_other
$check_time
\
-CAfile
$ocspdir
/
$2
-verify_other
$ocspdir
/
$2
-CApath
/dev/null
[
$?
!=
$3
]
&&
exit
1
}
for
resp
in
`
ls
-1
$ocspdir
/
*
.ors
`
do
$cmd
base64
-d
-in
$resp
-out
$resp
.der
done
echo
"=== VALID OCSP RESPONSES ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp ND1.ors ND1_Issuer_ICA.pem 0
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp ND2.ors ND2_Issuer_Root.pem 0
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp ND3.ors ND3_Issuer_Root.pem 0
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp D1.ors D1_Issuer_ICA.pem 0
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp D2.ors D2_Issuer_Root.pem 0
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp D3.ors D3_Issuer_Root.pem 0
echo
"=== INVALID SIGNATURE on the OCSP RESPONSE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISOP_ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISOP_ND1.ors ND1_Issuer_ICA.pem 1
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ISOP_ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISOP_ND2.ors ND2_Issuer_Root.pem 1
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISOP_ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISOP_ND3.ors ND3_Issuer_Root.pem 1
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISOP_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISOP_D1.ors D1_Issuer_ICA.pem 1
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ISOP_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISOP_D2.ors D2_Issuer_Root.pem 1
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISOP_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISOP_D3.ors D3_Issuer_Root.pem 1
echo
"=== WRONG RESPONDERID in the OCSP RESPONSE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WRID_ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WRID_ND1.ors ND1_Issuer_ICA.pem 1
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WRID_ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WRID_ND2.ors ND2_Issuer_Root.pem 1
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WRID_ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WRID_ND3.ors ND3_Issuer_Root.pem 1
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WRID_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WRID_D1.ors D1_Issuer_ICA.pem 1
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WRID_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WRID_D2.ors D2_Issuer_Root.pem 1
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WRID_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WRID_D3.ors D3_Issuer_Root.pem 1
echo
"=== WRONG ISSUERNAMEHASH in the OCSP RESPONSE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WINH_ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WINH_ND1.ors ND1_Issuer_ICA.pem 1
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WINH_ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WINH_ND2.ors ND2_Issuer_Root.pem 1
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WINH_ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WINH_ND3.ors ND3_Issuer_Root.pem 1
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WINH_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WINH_D1.ors D1_Issuer_ICA.pem 1
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WINH_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WINH_D2.ors D2_Issuer_Root.pem 1
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WINH_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WINH_D3.ors D3_Issuer_Root.pem 1
echo
"=== WRONG ISSUERKEYHASH in the OCSP RESPONSE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WIKH_ND1.ors.der
-verify_other
$ocspdir
/ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WIKH_ND1.ors ND1_Issuer_ICA.pem 1
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WIKH_ND2.ors.der
-verify_other
$ocspdir
/ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WIKH_ND2.ors ND2_Issuer_Root.pem 1
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WIKH_ND3.ors.der
-verify_other
$ocspdir
/ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WIKH_ND3.ors ND3_Issuer_Root.pem 1
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WIKH_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WIKH_D1.ors D1_Issuer_ICA.pem 1
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WIKH_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WIKH_D2.ors D2_Issuer_Root.pem 1
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WIKH_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WIKH_D3.ors D3_Issuer_Root.pem 1
echo
"=== WRONG KEY in the DELEGATED OCSP SIGNING CERTIFICATE ==="
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WKDOSC_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$std_params
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WKDOSC_D1.ors D1_Issuer_ICA.pem 1
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/WKDOSC_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$std_params
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WKDOSC_D2.ors D2_Issuer_Root.pem 1
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/WKDOSC_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$std_params
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp WKDOSC_D3.ors D3_Issuer_Root.pem 1
echo
"=== INVALID SIGNATURE on the DELEGATED OCSP SIGNING CERTIFICATE ==="
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISDOSC_D1.ors.der
-verify_other
$ocspdir
/D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISDOSC_D1.ors D1_Issuer_ICA.pem 1
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ISDOSC_D2.ors.der
-verify_other
$ocspdir
/D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISDOSC_D2.ors D2_Issuer_Root.pem 1
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ISDOSC_D3.ors.der
-verify_other
$ocspdir
/D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ISDOSC_D3.ors D3_Issuer_Root.pem 1
echo
"=== WRONG SUBJECT NAME in the ISSUER CERTIFICATE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND1.ors.der
-verify_other
$ocspdir
/WSNIC_ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ND1.ors WSNIC_ND1_Issuer_ICA.pem 1
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ND2.ors.der
-verify_other
$ocspdir
/WSNIC_ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ND2.ors WSNIC_ND2_Issuer_Root.pem 1
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND3.ors.der
-verify_other
$ocspdir
/WSNIC_ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ND3.ors WSNIC_ND3_Issuer_Root.pem 1
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D1.ors.der
-verify_other
$ocspdir
/WSNIC_D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp D1.ors WSNIC_D1_Issuer_ICA.pem 1
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/D2.ors.der
-verify_other
$ocspdir
/WSNIC_D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp D2.ors WSNIC_D2_Issuer_Root.pem 1
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D3.ors.der
-verify_other
$ocspdir
/WSNIC_D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp D3.ors WSNIC_D3_Issuer_Root.pem 1
echo
"=== WRONG KEY in the ISSUER CERTIFICATE ==="
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND1.ors.der
-verify_other
$ocspdir
/WKIC_ND1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ND1.ors WKIC_ND1_Issuer_ICA.pem 1
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ND2.ors.der
-verify_other
$ocspdir
/WKIC_ND2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ND2.ors WKIC_ND2_Issuer_Root.pem 1
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND3.ors.der
-verify_other
$ocspdir
/WKIC_ND3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp ND3.ors WKIC_ND3_Issuer_Root.pem 1
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D1.ors.der
-verify_other
$ocspdir
/WKIC_D1_Issuer_ICA.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp D1.ors WKIC_D1_Issuer_ICA.pem 1
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/D2.ors.der
-verify_other
$ocspdir
/WKIC_D2_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp D2.ors WKIC_D2_Issuer_Root.pem 1
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D3.ors.der
-verify_other
$ocspdir
/WKIC_D3_Issuer_Root.pem
$stdparams
if
[
$?
=
0
]
;
then
exit
1
;
fi
test_ocsp D3.ors WKIC_D3_Issuer_Root.pem 1
echo
"=== INVALID SIGNATURE on the ISSUER CERTIFICATE ==="
# Expect success, because we're explicitly trusting the issuer certificate.
echo
"NON-DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND1.ors.der
-verify_other
$ocspdir
/ISIC_ND1_Issuer_ICA.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp ND1.ors ISIC_ND1_Issuer_ICA.pem 0
echo
"NON-DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/ND2.ors.der
-verify_other
$ocspdir
/ISIC_ND2_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp ND2.ors ISIC_ND2_Issuer_Root.pem 0
echo
"NON-DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/ND3.ors.der
-verify_other
$ocspdir
/ISIC_ND3_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp ND3.ors ISIC_ND3_Issuer_Root.pem 0
echo
"DELEGATED; Intermediate CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D1.ors.der
-verify_other
$ocspdir
/ISIC_D1_Issuer_ICA.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp D1.ors ISIC_D1_Issuer_ICA.pem
echo
"DELEGATED; Root CA -> Intermediate CA"
$cmd
ocsp
-respin
$ocspdir
/D2.ors.der
-verify_other
$ocspdir
/ISIC_D2_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp D2.ors ISIC_D2_Issuer_Root.pem 0
echo
"DELEGATED; Root CA -> EE"
$cmd
ocsp
-respin
$ocspdir
/D3.ors.der
-verify_other
$ocspdir
/ISIC_D3_Issuer_Root.pem
$stdparams
if
[
$?
!=
0
]
;
then
exit
1
;
fi
test_ocsp D3.ors ISIC_D3_Issuer_Root.pem 0
/bin/rm
$ocspdir
/
*
.ors.der
echo
"ALL OCSP TESTS SUCCESSFUL"
exit
0
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录