asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
Last change
on this file since 94430e6 was
94430e6,
checked in by Thomas Klute <thomas2.klute@…>, 5 years ago
|
Test suite: Run a separate Apache instance for the OCSP responder
This change will be needed to cache OCSP responses on start (and
schedule) instead of when needed. An OCSP responder in the same Apache
instance won't be ready while the mod_gnutls post_config hook is
executing.
The changes to lock file handling included in this patch mean that
most parts of the test framework won't need to check which locking
method (if any) is used, they can just pass a lock file which is then
used for flock or PID file checks depending on ./configure results.
|
-
Property mode set to
100644
|
File size:
1.2 KB
|
Line | |
---|
1 | Define OCSP_PORT ${OCSP_PORT} |
---|
2 | Define TEST_PORT ${OCSP_PORT} |
---|
3 | |
---|
4 | Include ${srcdir}/base_apache.conf |
---|
5 | |
---|
6 | Include ${srcdir}/cgi_module.conf |
---|
7 | LoadModule env_module ${AP_LIBEXECDIR}/mod_env.so |
---|
8 | LoadModule rewrite_module ${AP_LIBEXECDIR}/mod_rewrite.so |
---|
9 | |
---|
10 | # separate log and PID file |
---|
11 | CustomLog logs/${TEST_NAME}.ocsp.access.log combined |
---|
12 | ErrorLog logs/${TEST_NAME}.ocsp.error.log |
---|
13 | PidFile ocsp@PID_AFFIX@.pid |
---|
14 | |
---|
15 | <IfDefine !OCSP_INDEX> |
---|
16 | # Default index file, define OCSP_INDEX in the test specific |
---|
17 | # config to override |
---|
18 | Define OCSP_INDEX ${PWD}/authority/ocsp_index.txt |
---|
19 | </IfDefine> |
---|
20 | |
---|
21 | <VirtualHost _default_:${OCSP_PORT}> |
---|
22 | RewriteEngine On |
---|
23 | RewriteRule ^/ocsp(.*) /ocsp.cgi$1 [L] |
---|
24 | <Location /ocsp/> |
---|
25 | # Some clients seem to have trouble with chunked |
---|
26 | # encoding, so force HTTP/1.0 for now. |
---|
27 | SetEnv downgrade-1.0 |
---|
28 | # certificates and key for ocsp.cgi |
---|
29 | SetEnv CA_CERT ${PWD}/authority/x509.pem |
---|
30 | SetEnv OCSP_INDEX ${OCSP_INDEX} |
---|
31 | SetEnv OCSP_CERT ${PWD}/ocsp-responder/x509.pem |
---|
32 | SetEnv OCSP_KEY ${PWD}/ocsp-responder/secret.key |
---|
33 | <If "-n osenv('OPENSSL')"> |
---|
34 | # Pass OPENSSL variable to CGI script if set |
---|
35 | SetEnv OPENSSL ${OPENSSL} |
---|
36 | </If> |
---|
37 | </Location> |
---|
38 | <Directory ${srcdir}/data> |
---|
39 | Options +ExecCGI |
---|
40 | </Directory> |
---|
41 | </VirtualHost> |
---|
Note: See
TracBrowser
for help on using the repository browser.