From 6d47c9c790e94163f92ba4df7310c097af9d5001 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Sat, 1 Apr 2006 01:00:22 +0000 Subject: [PATCH] Added crl tests git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16901 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/hx509/test_chain.in | 27 ++++++++++++++++++++++----- 1 file changed, 22 insertions(+), 5 deletions(-) diff --git a/lib/hx509/test_chain.in b/lib/hx509/test_chain.in index 0030f5021..b649f3ab1 100644 --- a/lib/hx509/test_chain.in +++ b/lib/hx509/test_chain.in @@ -87,31 +87,48 @@ echo "sub-cert -> sub-ca -> root" chain:FILE:$srcdir/data/sub-ca.crt \ anchor:FILE:$srcdir/data/ca.crt > /dev/null || exit 1 +echo "ocsp non-ca responder" ./hxtool verify \ cert:FILE:$srcdir/data/test.crt \ anchor:FILE:$srcdir/data/ca.crt \ - ocsp:FILE:$srcdir/data/ocsp-resp1-ocsp.der || exit 1 + ocsp:FILE:$srcdir/data/ocsp-resp1-ocsp.der > /dev/null || exit 1 +echo "ocsp ca responder" ./hxtool verify \ cert:FILE:$srcdir/data/test.crt \ anchor:FILE:$srcdir/data/ca.crt \ - ocsp:FILE:$srcdir/data/ocsp-resp1-ca.der || exit 1 + ocsp:FILE:$srcdir/data/ocsp-resp1-ca.der > /dev/null || exit 1 +echo "ocsp no-ca responder, missing cert" ./hxtool verify \ cert:FILE:$srcdir/data/test.crt \ anchor:FILE:$srcdir/data/ca.crt \ - ocsp:FILE:$srcdir/data/ocsp-resp1-ocsp-no-cert.der && exit 1 + ocsp:FILE:$srcdir/data/ocsp-resp1-ocsp-no-cert.der > /dev/null && exit 1 +echo "ocsp no-ca responder, missing cert, in pool" ./hxtool verify \ cert:FILE:$srcdir/data/test.crt \ anchor:FILE:$srcdir/data/ca.crt \ ocsp:FILE:$srcdir/data/ocsp-resp1-ocsp-no-cert.der \ - chain:FILE:$srcdir/data/ocsp-responder.crt || exit 1 + chain:FILE:$srcdir/data/ocsp-responder.crt > /dev/null || exit 1 +echo "ocsp revoked cert" ./hxtool verify \ cert:FILE:$srcdir/data/revoke.crt \ anchor:FILE:$srcdir/data/ca.crt \ - ocsp:FILE:$srcdir/data/ocsp-resp2.der && exit 1 + ocsp:FILE:$srcdir/data/ocsp-resp2.der > /dev/null && exit 1 + +echo "crl non-revoked cert" +./hxtool verify \ + cert:FILE:$srcdir/data/test.crt \ + anchor:FILE:$srcdir/data/ca.crt \ + crl:FILE:$srcdir/data/crl1.der > /dev/null || exit 1 + +echo "crl revoked cert" +./hxtool verify \ + cert:FILE:$srcdir/data/revoke.crt \ + anchor:FILE:$srcdir/data/ca.crt \ + crl:FILE:$srcdir/data/crl1.der > /dev/null && exit 1 exit 0