source: mod_gnutls/test/test-22_TLS_reverse_proxy_crl_revoke.bash @ 39bd695

debian/masterdebian/stretch-backportsjessie-backportsupstream
Last change on this file since 39bd695 was 907ae8f, checked in by Thomas Klute <thomas2.klute@…>, 5 years ago

New test case: Proxy server detects revoked back end cert using CRL

The test case generates a CRL revoking the server certificate. Using
it as GnuTLSProxyCRLFile should cause the connection to the back end
server to fail.

  • Property mode set to 100755
File size: 719 bytes
Line 
1#!/bin/bash
2
3set -e
4
5testdir="./tests/22_TLS_reverse_proxy_crl_revoke"
6. ./proxy_backend.bash
7
8# Generate CRL revoking the server certificate. Using it as
9# GnuTLSProxyCRLFile should cause the connection to the back end
10# server to fail.
11certtool --generate-crl \
12    --load-ca-privkey authority/secret.key \
13    --load-ca-certificate authority/x509.pem \
14    --load-certificate server/x509.pem \
15    --template "${testdir}/crl.template" \
16    >"${testdir}/crl.pem"
17
18function stop_backend
19{
20    backend_apache "${dir}" "backend.conf" stop
21}
22backend_apache "${testdir}" "backend.conf" start "${BACKEND_LOCK}"
23trap stop_backend EXIT
24
25make -f TestMakefile t-22
26
27backend_apache "${testdir}" "backend.conf" stop
28trap - EXIT
Note: See TracBrowser for help on using the repository browser.