mirror of
https://github.com/haproxy/haproxy.git
synced 2026-02-03 20:39:41 -05:00
b285f11cd6
ssl/show_ssl_ocspresponse.vtc was renamed to ssl/show_ssl_ocspresponse.vtci
to produce a common part runnable both for QUIC and TCP listeners.
Then show_ssl_ocspresponse.vtc files were created both under ssl and quic directories
to call this .vtci file with correct VTC_SOCK_TYPE environment values
("quic" for QUIC listeners and "stream" for TCP listeners);
28 lines
1.3 KiB
Text
28 lines
1.3 KiB
Text
#REGTEST_TYPE=devel
|
|
|
|
# broken with BoringSSL.
|
|
|
|
# This reg-test uses the "show ssl ocsp-response" command to display the details
|
|
# of the OCSP responses used by HAProxy.
|
|
# It also uses the new special cases of the "show ssl cert" command, where an OCSP
|
|
# extension is provided to the certificate name (with or without preceding * for an
|
|
# ongoing transaction).
|
|
#
|
|
# It uses the show_ocsp_server.pem server certificate, signed off by set_cafile_rootCA.crt,
|
|
# which has two OCSP responses, show_ocsp_server.pem.ocsp which is loaded by default and in
|
|
# which it is valid, and show_ocsp_server.pem.ocsp.revoked in which it is revoked.
|
|
# The OSCP response is updated through the two means available in the CLI, the
|
|
# "set ssl ocsp-response" command and the update through a "set ssl cert foo.ocsp".
|
|
#
|
|
# It requires socat to upload the new OCSP responses.
|
|
#
|
|
# If this test does not work anymore:
|
|
# - Check that you have socat
|
|
|
|
varnishtest "Test the 'show ssl ocsp-response' and 'show ssl cert foo.pem.ocsp' features of the CLI"
|
|
feature cmd "$HAPROXY_PROGRAM -cc 'version_atleast(2.5-dev0)'"
|
|
feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL) && !ssllib_name_startswith(BoringSSL) && !ssllib_name_startswith(wolfSSL)'"
|
|
feature cmd "command -v socat && command -v openssl"
|
|
|
|
setenv VTC_SOCK_TYPE stream
|
|
include ${testdir}/show_ssl_ocspresponse.vtci
|