EmptyAiaResponseIsIgnored should use incomplete chain.
Since the certificate names were the same, different tests were colliding with caches since they had the same certificate name. In addition to the simple fix, this changes the test to build a partial chain using two intermediates. The leaf's issuing intermediate is added to the ExtraStore and the second intermediate is expected to be fetched by AIA (and fail with an empty response). This is to help coerce chain builders treat it as a partial chain, and can actually make some progress, as opposed to the leaf being treated as an invalid root.
Showing
想要评论请 注册 或 登录