Marco Oliverio
194db7e844
tests: gate ocsp test on SM2 || SM3
...
we don't properly support SM2 and SM3 hash algo id properly yet
2025-02-27 19:38:46 +00:00
Marco Oliverio
814f0f8a09
Refactor CERT_ID encoding as per review comments
2025-02-27 12:50:37 +00:00
David Garske
512f928650
Fix cast warnings with g++.
2025-02-26 14:45:23 -08:00
Marco Oliverio
5eef98a5ea
ocsp: add OCSP CERT ID encode/decode test
2025-02-25 22:22:43 +00:00
Marco Oliverio
740fb6bafc
test: gate ocsp test when SHA-1 is disabled
...
tests blobs contains sha-1 hashes in certificate status
2025-02-25 15:42:35 +00:00
Marco Oliverio
8b80cb10d6
ocsp: responderID.ByKey is SHA-1 Digest len
...
Check that responderID.ByKey is exactly WC_SHA_DIGEST_SIZE as per RFC
6960. KEYID_SIZE can change across build configuration.
2025-02-25 15:42:22 +00:00
Marco Oliverio
a1d1f0ddf1
ocsp: enable SSL_CTX_set_tlsext_status_cb only in OPENSSL_ALL
2025-02-17 11:29:09 +00:00
Marco Oliverio
1eecf326fd
ocsp: use ocspReponse->heap in OcspFindSigner + minors
2025-02-17 08:59:29 +00:00
Marco Oliverio
0af092ec79
ocsp: minors
2025-02-17 08:59:29 +00:00
Marco Oliverio
a06a8b589c
ocsp: minors
2025-02-17 08:59:29 +00:00
Marco Oliverio
4351a5dd70
ocsp/test: better test assertions
2025-02-17 08:59:29 +00:00
Marco Oliverio
3724094ce2
ocsp: add test for response with unusable internal cert
...
- Added a new test case `resp_bad_embedded_cert` in
`create_ocsp_test_blobs.py` to test OCSP response with an unusable
internal cert that can be verified in Cert Manager.
- Updated `test_ocsp_response_parsing` in `ocsp.c` to include the new
test case.
- Ensured the new test case checks for proper handling of OCSP responses
with incorrect internal certificates.
2025-02-17 08:59:29 +00:00
Marco Oliverio
ae3177c439
ocsp-resp-refactor: fix tests
2025-02-17 08:59:29 +00:00
Marco Oliverio
2fe413d80f
ocsp: add tests
2025-02-17 08:59:23 +00:00
