diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-09-22 08:36:22 +0200 |
|---|---|---|
| committer | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-09-26 14:03:44 +0200 |
| commit | 4ff993d7912516a2fd1d5c1e97a6f26a4644c1c6 (patch) | |
| tree | ac313e70bd5b7fef2dc7761ff80aa90c83c0a416 /test/recipes/25-test_verify.t | |
| parent | cf61b97d5fb9208ac254e999d86b1cf40c12b442 (diff) | |
| download | openssl-new-4ff993d7912516a2fd1d5c1e97a6f26a4644c1c6.tar.gz | |
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
Fixes #7761
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12947)
Diffstat (limited to 'test/recipes/25-test_verify.t')
| -rw-r--r-- | test/recipes/25-test_verify.t | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/test/recipes/25-test_verify.t b/test/recipes/25-test_verify.t index 6d8f78c978..9bbabd0fa3 100644 --- a/test/recipes/25-test_verify.t +++ b/test/recipes/25-test_verify.t @@ -27,7 +27,7 @@ sub verify { run(app([@args])); } -plan tests => 148; +plan tests => 151; # Canonical success ok(verify("ee-cert", "sslserver", ["root-cert"], ["ca-cert"]), @@ -45,6 +45,15 @@ ok(!verify("ee-cert", "sslserver", [qw(root-cert2)], [qw(ca-cert)]), ok(!verify("ee-cert", "sslserver", [qw(root-name2)], [qw(ca-cert)]), "fail wrong root DN"); +# Critical extensions + +ok(verify("ee-cert-noncrit-unknown-ext", "sslserver", [qw(root-cert)], [qw(ca-cert)]), + "accept non-critical unknown extension"); +ok(!verify("ee-cert-crit-unknown-ext", "sslserver", [qw(root-cert)], [qw(ca-cert)]), + "reject critical unknown extension"); +ok(verify("ee-cert-ocsp-nocheck", "sslserver", [qw(root-cert)], [qw(ca-cert)]), + "accept critical OCSP No Check"); + # Explicit trust/purpose combinations # ok(verify("ee-cert", "sslserver", [qw(sroot-cert)], [qw(ca-cert)]), |