aboutsummaryrefslogtreecommitdiffstats
path: root/src/tests/test_ocsp.cpp
Commit message (Collapse)AuthorAgeFilesLines
* add status code to OCSP responsesPatrick Schmidt2019-09-241-0/+4
|
* Fix test - OCSP responder seems unhappy about our old ee certJack Lloyd2019-08-101-4/+3
|
* Fix "OSCP" typo in OCSP code.Jack Lloyd2019-07-231-2/+2
| | | | GH #2048
* test all combinations of next_update and max_age similarlyPatrick Schmidt2019-05-281-16/+101
|
* OCSP timeout test uses response w/o 'next_update'René Meusel2019-05-281-14/+24
|
* add optional max_age for ocsp checksPatrick Schmidt2019-05-271-0/+32
|
* Remove trailing whitespaceJack Lloyd2019-01-131-3/+3
|
* Fix the botan-test --verbose flag, which did nothingJack Lloyd2018-04-111-1/+1
| | | | It used to do something, then I broke it.
* OCSP softfail revocation checkMathieu Souchaud2018-03-011-0/+33
|
* Reorganize code to avoid cli/test build failures if filesystem disabledJack Lloyd2018-01-191-1/+1
| | | | Fixes #1422
* Move utils for reading test data files up to Test:: from OCSPJack Lloyd2017-12-291-32/+4
|
* Avoid test failures when PKCSv1.5 signatures are disabled in buildJack Lloyd2017-12-201-1/+1
|
* Avoid OCSPing on the Let's Encrypt CA certJack Lloyd2017-11-191-6/+2
| | | | | | Their issuing CA seems to have some performance problems with OCSP (https://github.com/letsencrypt/boulder/issues/1929) and it's currently causing timeouts in the tests.
* Move all the various X509 test data files under src/tests/data/x509Jack Lloyd2017-11-161-14/+14
|
* Further header cleanupsJack Lloyd2017-09-281-0/+1
|
* Further build/test fixes for restricted configurationsJack Lloyd2017-09-241-1/+1
|
* Add final annotations as appropriate in the test codeJack Lloyd2017-09-221-1/+1
|
* add OCSP::Response::certificates() + unit testRené Meusel2017-07-211-0/+31
|
* Reformat code with astyle + fix code styleTomasz Frydrych2017-05-011-20/+20
|
* Allow OCSP requests without the full subject certificateNuno Goncalves2017-03-041-2/+8
| | | | | | | | | | | | | | | | A OCSP request doesn't need the full subject certificate. This extends the API to require instead of the subject certificate: * OCSP::Request: subject serial. * OCSP::online_check: subject serial AND ocsp responder url. API breaking change: * removal of OCSP::Request::subject() as OCSP::Request doesn't need to hold the certificate, but only the serial. Signed-off-by: Nuno Goncalves <[email protected]>
* The certificate being tested by the OCSP online test has expired.Jack Lloyd2017-02-261-1/+2
| | | | | | | | | | This caused a test failure if run with --run-online-tests. This is not the default but it caused the coverage build to fail. Fix the test to reflect expired status. The whole thing does not seem wholly satsifactory since we are still relying the behavior on an external party, perhaps a mock OCSP responder should be created for the tests.
* Add macro signalling support for online revocation checks.Jack Lloyd2016-11-231-0/+4
|
* Windows fixJack Lloyd2016-11-231-1/+1
|
* Better OCSP tests including online testsJack Lloyd2016-11-231-5/+91
| | | | Tests touching network are gated by --run-online-tests flag.
* Add some simple OCSP testsJack Lloyd2016-11-231-0/+115
Nothing much but better than nothing. Also add a useful arg check to OCSP::Request constructor.