Changeset 7cfc02b in mod_gnutls for test/Makefile.am


Ignore:
Timestamp:
Jul 16, 2019, 1:24:18 PM (15 months ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
master, proxy-ticket
Children:
65c84e5
Parents:
f828974
Message:

Test suite: Add an OCSP responder for the sub CA

All CAs use the same server as their OCSP responders. The OCSP URI now
includes the CA identity so the server can select the correct CA when
generating the response.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • test/Makefile.am

    rf828974 r7cfc02b  
    6262        rogueca rogueca/rogueclient
    6363if ENABLE_OCSP_TEST
    64 x509_only_identities += authority/ocsp-responder
     64x509_only_identities += authority/ocsp-responder authority/subca/ocsp-responder
    6565endif
    6666x509_identities = $(shared_identities) $(x509_only_identities)
     
    103103        authority/server/template.in \
    104104        authority/subca/template.in authority/subca/server/template.in \
     105        authority/subca/ocsp-responder/template \
    105106        rogueca/template rogueca/rogueclient/template.in
    106107generated_templates = authority/template authority/client/template \
     
    163164if ENABLE_OCSP_TEST
    164165# rules to build OCSP database
    165 check_DATA += authority/ocsp_index.txt
    166 MOSTLYCLEANFILES += authority/ocsp_index.txt authority/ocsp_index.txt.attr
    167 authority/ocsp_index.txt: $(x509_tokens) gen_ocsp_index authority/ocsp_index.txt.attr
    168         ./gen_ocsp_index authority/server/x509.pem authority/client/x509.pem > $@
    169 
    170 authority/ocsp_index.txt.attr: authority/secret.key
     166ocsp_index_data = authority/ocsp_index.txt authority/ocsp_index.txt.attr \
     167        authority/subca/ocsp_index.txt authority/subca/ocsp_index.txt.attr
     168check_DATA += $(ocsp_index_data)
     169MOSTLYCLEANFILES += $(ocsp_index_data)
     170
     171# The "find" command builds a list of all certificates directly below
     172# the CA that aren't for the ocsp-responder.
     173%/ocsp_index.txt: $(x509_tokens) gen_ocsp_index
     174        ./gen_ocsp_index $$(find $(*) -mindepth 2 -maxdepth 2 ! -path '*/ocsp-responder/*' -name x509.pem) > $@
     175
     176%/ocsp_index.txt.attr:
     177        @mkdir -m 0700 -p $(dir $@)
    171178        echo "unique_subject = no" > $@
    172179
     
    178185        authority/subca/server/x509-chain.pem
    179186check_DATA += $(chain_tokens)
    180 MOSTLYCLEANFILES += $(chain_tokens)
     187MOSTLYCLEANFILES += $(chain_tokens) authority/x509-chain.pem
    181188endif
    182189
Note: See TracChangeset for help on using the changeset viewer.