source: mod_gnutls/test/test-27_OCSP_server.bash @ 94430e6

debian/masterdebian/stretch-backportsupstream
Last change on this file since 94430e6 was 94430e6, checked in by Thomas Klute <thomas2.klute@…>, 2 years ago

Test suite: Run a separate Apache instance for the OCSP responder

This change will be needed to cache OCSP responses on start (and
schedule) instead of when needed. An OCSP responder in the same Apache
instance won't be ready while the mod_gnutls post_config hook is
executing.

The changes to lock file handling included in this patch mean that
most parts of the test framework won't need to check which locking
method (if any) is used, they can just pass a lock file which is then
used for flock or PID file checks depending on ./configure results.

  • Property mode set to 100755
File size: 829 bytes
Line 
1#!/bin/bash
2# Try HTTPS access with OCSP status check
3
4# Skip if OCSP tests are not enabled
5[ -n "${OCSP_PORT}" ] || exit 77
6
7: ${srcdir:="."}
8. ${srcdir}/common.bash
9netns_reexec ${@}
10
11. $(dirname ${0})/proxy_backend.bash
12
13testdir="${srcdir}/tests/27_OCSP_server"
14TEST_NAME="$(basename ${testdir})"
15
16backend_apache "${testdir}" "ocsp.conf" start "${OCSP_LOCK}"
17
18# trigger OCSP server test in the runtests script
19export CHECK_OCSP_SERVER="true"
20echo "OCSP index for the test CA:"
21cat authority/ocsp_index.txt
22
23${srcdir}/runtests t-27
24ret=${?}
25
26backend_apache "${testdir}" "ocsp.conf" stop
27
28echo "Checking if client actually got a stapled response."
29if grep -P "^- Options: .*OCSP status request," outputs/27_*.output; then
30    echo "OK"
31else
32    echo "Error: \"OCSP status request\" option is missing!"
33    ret=1
34fi
35
36exit ${ret}
Note: See TracBrowser for help on using the repository browser.