debian/masterdebian/stretch-backportsproxy-ticketupstream
|
Last change
on this file since 4cc1edc was
94cb972,
checked in by Thomas Klute <thomas2.klute@…>, 4 years ago
|
|
Minimal OCSP stapling implementation using externally provided response
Works if the configured file contains a valid and current OCSP
response. Note that the module does not yet check those conditions,
the file is just read and forwarded to GnuTLS.
|
-
Property mode set to
100755
|
|
File size:
430 bytes
|
| Line | |
|---|
| 1 | #!/bin/bash |
|---|
| 2 | # Try HTTPS access with OCSP status check |
|---|
| 3 | |
|---|
| 4 | # Skip if OCSP tests are not enabled |
|---|
| 5 | [ -n "${OCSP_PORT}" ] || exit 77 |
|---|
| 6 | |
|---|
| 7 | # trigger OCSP server test in the runtests script |
|---|
| 8 | export CHECK_OCSP_SERVER="true" |
|---|
| 9 | export OCSP_RESPONSE_FILE="$(mktemp mod_gnutls_test-XXXXXX.der)" |
|---|
| 10 | |
|---|
| 11 | ${srcdir}/runtests t-27 |
|---|
| 12 | |
|---|
| 13 | ocsptool -e --load-signer authority/x509.pem --load-response ${OCSP_RESPONSE_FILE} || ret=1 |
|---|
| 14 | rm "${OCSP_RESPONSE_FILE}" |
|---|
| 15 | exit ${ret} |
|---|
Note: See
TracBrowser
for help on using the repository browser.
