Changeset a99f1aa in mod_gnutls for test/authority

Timestamp:

Feb 11, 2020, 1:53:31 AM (3 years ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, master, proxy-ticket

Children:

ca0690b

Parents:

6e41fcb

Message:

Test suite: Create OCSP responder certificates with id-pkix-ocsp-nocheck

It doesn't really matter for the tests because they don't try to check
the responder certificates for revocation, but it's good style. Note
that production certificates with this extension should have a much
shorter validity period.

Location:

test/authority

Files:

• ocsp-responder/template (modified) (1 diff)
• subca/ocsp-responder/template (modified) (1 diff)

test/authority/ocsp-responder/template

@@ -2 +2 @@
 signing_key
 ocsp_signing_key
+# id-pkix-ocsp-nocheck, NULL
+add_extension = 1.3.6.1.5.5.7.48.1.5 0x0500

test/authority/subca/ocsp-responder/template

@@ -2 +2 @@
 signing_key
 ocsp_signing_key
+# id-pkix-ocsp-nocheck, NULL
+add_extension = 1.3.6.1.5.5.7.48.1.5 0x0500