1 # OCSP stapling, server
5 exim -z '1: Server sends good staple on request'
8 exim -bd -oX PORT_D -DSERVER=server \
9 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
12 -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \
13 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
24 mail from:<userx@test.ex>
26 rcpt to:<userx@test.ex>
35 exim -z '2: Server does not staple an outdated response'
37 # This test fails on older GnuTLS versions, which do not check the resp on the server
39 exim -bd -oX PORT_D -DSERVER=server \
40 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp
42 client-gnutls -ocsp aux-fixed/exim-ca/expired1.example.com/CA.pem HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
60 exim -z '3: Server does not staple a response for a revoked cert'
62 # This test fails on older GnuTLS versions, which do not check the resp on the server
64 exim -bd -oX PORT_D -DSERVER=server \
65 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp
68 -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \
69 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
87 exim -z '4: Connection functions when server is prepared to staple but client does not request it'
90 exim -bd -oX PORT_D -DSERVER=server \
91 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
95 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2