@@ -753,187 +753,151 @@ tasks:
753
753
tags : [load-balancer, noauth, nossl]
754
754
755
755
# Ocsp tests
756
- - name : test-ocsp-ecdsa-basic-tls-ocsp-disableStapling-valid
756
+ - name : test-ocsp-edcsa-valid-cert-server-does-not-staple
757
757
commands :
758
758
- func : run server
759
759
vars :
760
760
TEST_NAME : ocsp
761
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
761
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
762
762
- func : run tests
763
763
vars :
764
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
764
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
765
765
OCSP_SERVER_TYPE : valid
766
766
TEST_NAME : ocsp
767
- tags : [ocsp, ocsp-ecdsa ]
768
- - name : test-ocsp-ecdsa-basic-tls-ocsp-disableStapling-revoked
767
+ tags : [ocsp, ocsp-edcsa ]
768
+ - name : test-ocsp-edcsa-invalid-cert-server-does-not-staple
769
769
commands :
770
770
- func : run server
771
771
vars :
772
772
TEST_NAME : ocsp
773
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
773
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
774
774
- func : run tests
775
775
vars :
776
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
776
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
777
777
OCSP_SERVER_TYPE : revoked
778
778
TEST_NAME : ocsp
779
- tags : [ocsp, ocsp-ecdsa ]
780
- - name : test-ocsp-ecdsa-basic-tls-ocsp-disableStapling-valid-delegate
779
+ tags : [ocsp, ocsp-edcsa ]
780
+ - name : test-ocsp-edcsa-delegate-valid-cert-server-does-not-staple
781
781
commands :
782
782
- func : run server
783
783
vars :
784
784
TEST_NAME : ocsp
785
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
785
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
786
786
- func : run tests
787
787
vars :
788
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
788
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
789
789
OCSP_SERVER_TYPE : valid-delegate
790
790
TEST_NAME : ocsp
791
- tags : [ocsp, ocsp-ecdsa ]
792
- - name : test-ocsp-ecdsa-basic-tls-ocsp-disableStapling-revoked-delegate
791
+ tags : [ocsp, ocsp-edcsa ]
792
+ - name : test-ocsp-edcsa-delegate-invalid-cert-server-does-not-staple
793
793
commands :
794
794
- func : run server
795
795
vars :
796
796
TEST_NAME : ocsp
797
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
797
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
798
798
- func : run tests
799
799
vars :
800
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
800
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
801
801
OCSP_SERVER_TYPE : revoked-delegate
802
802
TEST_NAME : ocsp
803
- tags : [ocsp, ocsp-ecdsa ]
804
- - name : test-ocsp-ecdsa-basic-tls-ocsp-disableStapling-no-responder
803
+ tags : [ocsp, ocsp-edcsa ]
804
+ - name : test-ocsp-edcsa-soft-fail
805
805
commands :
806
806
- func : run server
807
807
vars :
808
808
TEST_NAME : ocsp
809
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
809
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
810
810
- func : run tests
811
811
vars :
812
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-disableStapling.json
812
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-disableStapling.json
813
813
OCSP_SERVER_TYPE : no-responder
814
814
TEST_NAME : ocsp
815
- tags : [ocsp, ocsp-ecdsa ]
816
- - name : test-ocsp-ecdsa-basic-tls-ocsp-mustStaple-disableStapling-revoked
815
+ tags : [ocsp, ocsp-edcsa ]
816
+ - name : test-ocsp-edcsa-valid-cert-server-staples
817
817
commands :
818
818
- func : run server
819
819
vars :
820
820
TEST_NAME : ocsp
821
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-mustStaple-disableStapling .json
821
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple.json
822
822
- func : run tests
823
823
vars :
824
- ORCHESTRATION_FILE : ecdsa-basic-tls-ocsp-mustStaple-disableStapling.json
825
- OCSP_SERVER_TYPE : revoked
826
- TEST_NAME : ocsp
827
- tags : [ocsp, ocsp-ecdsa]
828
- - name : test-ocsp-ecdsa-basic-tls-ocsp-mustStaple-disableStapling-revoked-delegate
829
- commands :
830
- - func : run server
831
- vars :
832
- TEST_NAME : ocsp
833
- ORCHESTRATION_FILE : ecdsa-basic-tls-ocsp-mustStaple-disableStapling.json
834
- - func : run tests
835
- vars :
836
- ORCHESTRATION_FILE : ecdsa-basic-tls-ocsp-mustStaple-disableStapling.json
837
- OCSP_SERVER_TYPE : revoked-delegate
838
- TEST_NAME : ocsp
839
- tags : [ocsp, ocsp-ecdsa]
840
- - name : test-ocsp-ecdsa-basic-tls-ocsp-mustStaple-disableStapling-no-responder
841
- commands :
842
- - func : run server
843
- vars :
844
- TEST_NAME : ocsp
845
- ORCHESTRATION_FILE : ecdsa-basic-tls-ocsp-mustStaple-disableStapling.json
846
- - func : run tests
847
- vars :
848
- ORCHESTRATION_FILE : ecdsa-basic-tls-ocsp-mustStaple-disableStapling.json
849
- OCSP_SERVER_TYPE : no-responder
850
- TEST_NAME : ocsp
851
- tags : [ocsp, ocsp-ecdsa]
852
- - name : test-ocsp-ecdsa-basic-tls-ocsp-mustStaple-valid
853
- commands :
854
- - func : run server
855
- vars :
856
- TEST_NAME : ocsp
857
- ORCHESTRATION_FILE : ecdsa-basic-tls-ocsp-mustStaple.json
858
- - func : run tests
859
- vars :
860
- ORCHESTRATION_FILE : ecdsa-basic-tls-ocsp-mustStaple.json
824
+ ORCHESTRATION_FILE : edcsa-basic-tls-ocsp-mustStaple.json
861
825
OCSP_SERVER_TYPE : valid
862
826
TEST_NAME : ocsp
863
- tags : [ocsp, ocsp-ecdsa , ocsp-staple]
864
- - name : test-ocsp-ecdsa-basic-tls-ocsp-mustStaple-revoked
827
+ tags : [ocsp, ocsp-edcsa , ocsp-staple]
828
+ - name : test-ocsp-edcsa-invalid-cert-server-staples
865
829
commands :
866
830
- func : run server
867
831
vars :
868
832
TEST_NAME : ocsp
869
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-mustStaple.json
833
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple.json
870
834
- func : run tests
871
835
vars :
872
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-mustStaple.json
836
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple.json
873
837
OCSP_SERVER_TYPE : revoked
874
838
TEST_NAME : ocsp
875
- tags : [ocsp, ocsp-ecdsa , ocsp-staple]
876
- - name : test-ocsp-ecdsa-basic-tls-ocsp-mustStaple-valid-delegate
839
+ tags : [ocsp, ocsp-edcsa , ocsp-staple]
840
+ - name : test-ocsp-edcsa-delegate-valid-cert-server-staples
877
841
commands :
878
842
- func : run server
879
843
vars :
880
844
TEST_NAME : ocsp
881
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-mustStaple.json
845
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple.json
882
846
- func : run tests
883
847
vars :
884
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-mustStaple.json
848
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple.json
885
849
OCSP_SERVER_TYPE : valid-delegate
886
850
TEST_NAME : ocsp
887
- tags : [ocsp, ocsp-ecdsa , ocsp-staple]
888
- - name : test-ocsp-ecdsa-basic-tls-ocsp-mustStaple-revoked-delegate
851
+ tags : [ocsp, ocsp-edcsa , ocsp-staple]
852
+ - name : test-ocsp-edcsa-delegate-invalid-cert-server-staples
889
853
commands :
890
854
- func : run server
891
855
vars :
892
856
TEST_NAME : ocsp
893
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-mustStaple.json
857
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple.json
894
858
- func : run tests
895
859
vars :
896
- ORCHESTRATION_FILE : ecdsa -basic-tls-ocsp-mustStaple.json
860
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple.json
897
861
OCSP_SERVER_TYPE : revoked-delegate
898
862
TEST_NAME : ocsp
899
- tags : [ocsp, ocsp-ecdsa , ocsp-staple]
900
- - name : test-ocsp-rsa-basic-tls-ocsp -mustStaple-disableStapling-revoked
863
+ tags : [ocsp, ocsp-edcsa , ocsp-staple]
864
+ - name : test-ocsp-edcsa-malicious-invalid-cert -mustStaple-server-does-not-staple
901
865
commands :
902
866
- func : run server
903
867
vars :
904
868
TEST_NAME : ocsp
905
- ORCHESTRATION_FILE : rsa -basic-tls-ocsp-mustStaple-disableStapling.json
869
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple-disableStapling.json
906
870
- func : run tests
907
871
vars :
908
- ORCHESTRATION_FILE : rsa -basic-tls-ocsp-mustStaple-disableStapling.json
872
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple-disableStapling.json
909
873
OCSP_SERVER_TYPE : revoked
910
874
TEST_NAME : ocsp
911
- tags : [ocsp, ocsp-rsa ]
912
- - name : test-ocsp-rsa-basic-tls-ocsp- mustStaple-disableStapling-revoked-delegate
875
+ tags : [ocsp, ocsp-edcsa ]
876
+ - name : test-ocsp-edcsa-delegate-malicious-invalid-cert- mustStaple-server-does-not-staple
913
877
commands :
914
878
- func : run server
915
879
vars :
916
880
TEST_NAME : ocsp
917
- ORCHESTRATION_FILE : rsa -basic-tls-ocsp-mustStaple-disableStapling.json
881
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple-disableStapling.json
918
882
- func : run tests
919
883
vars :
920
- ORCHESTRATION_FILE : rsa -basic-tls-ocsp-mustStaple-disableStapling.json
884
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple-disableStapling.json
921
885
OCSP_SERVER_TYPE : revoked-delegate
922
886
TEST_NAME : ocsp
923
- tags : [ocsp, ocsp-rsa ]
924
- - name : test-ocsp-rsa-basic-tls-ocsp -mustStaple-disableStapling-no-responder
887
+ tags : [ocsp, ocsp-edcsa ]
888
+ - name : test-ocsp-edcsa-malicious-no-responder -mustStaple-server-does-not-staple
925
889
commands :
926
890
- func : run server
927
891
vars :
928
892
TEST_NAME : ocsp
929
- ORCHESTRATION_FILE : rsa -basic-tls-ocsp-mustStaple-disableStapling.json
893
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple-disableStapling.json
930
894
- func : run tests
931
895
vars :
932
- ORCHESTRATION_FILE : rsa -basic-tls-ocsp-mustStaple-disableStapling.json
896
+ ORCHESTRATION_FILE : edcsa -basic-tls-ocsp-mustStaple-disableStapling.json
933
897
OCSP_SERVER_TYPE : no-responder
934
898
TEST_NAME : ocsp
935
- tags : [ocsp, ocsp-rsa ]
936
- - name : test-ocsp-rsa-basic-tls-ocsp-disableStapling-valid
899
+ tags : [ocsp, ocsp-edcsa ]
900
+ - name : test-ocsp-rsa-valid-cert-server-does-not-staple
937
901
commands :
938
902
- func : run server
939
903
vars :
@@ -945,7 +909,7 @@ tasks:
945
909
OCSP_SERVER_TYPE : valid
946
910
TEST_NAME : ocsp
947
911
tags : [ocsp, ocsp-rsa]
948
- - name : test-ocsp-rsa-basic-tls-ocsp-disableStapling-revoked
912
+ - name : test-ocsp-rsa-invalid-cert-server-does-not-staple
949
913
commands :
950
914
- func : run server
951
915
vars :
@@ -957,7 +921,7 @@ tasks:
957
921
OCSP_SERVER_TYPE : revoked
958
922
TEST_NAME : ocsp
959
923
tags : [ocsp, ocsp-rsa]
960
- - name : test-ocsp-rsa-basic-tls-ocsp-disableStapling-valid-delegate
924
+ - name : test-ocsp-rsa-delegate-valid-cert-server-does-not-staple
961
925
commands :
962
926
- func : run server
963
927
vars :
@@ -969,7 +933,7 @@ tasks:
969
933
OCSP_SERVER_TYPE : valid-delegate
970
934
TEST_NAME : ocsp
971
935
tags : [ocsp, ocsp-rsa]
972
- - name : test-ocsp-rsa-basic-tls-ocsp-disableStapling-revoked-delegate
936
+ - name : test-ocsp-rsa-delegate-invalid-cert-server-does-not-staple
973
937
commands :
974
938
- func : run server
975
939
vars :
@@ -981,7 +945,7 @@ tasks:
981
945
OCSP_SERVER_TYPE : revoked-delegate
982
946
TEST_NAME : ocsp
983
947
tags : [ocsp, ocsp-rsa]
984
- - name : test-ocsp-rsa-basic-tls-ocsp-disableStapling-no-responder
948
+ - name : test-ocsp-rsa-soft-fail
985
949
commands :
986
950
- func : run server
987
951
vars :
@@ -993,7 +957,7 @@ tasks:
993
957
OCSP_SERVER_TYPE : no-responder
994
958
TEST_NAME : ocsp
995
959
tags : [ocsp, ocsp-rsa]
996
- - name : test-ocsp-rsa-basic-tls-ocsp-mustStaple-valid
960
+ - name : test-ocsp-rsa-valid-cert-server-staples
997
961
commands :
998
962
- func : run server
999
963
vars :
@@ -1005,7 +969,7 @@ tasks:
1005
969
OCSP_SERVER_TYPE : valid
1006
970
TEST_NAME : ocsp
1007
971
tags : [ocsp, ocsp-rsa, ocsp-staple]
1008
- - name : test-ocsp-rsa-basic-tls-ocsp-mustStaple-revoked
972
+ - name : test-ocsp-rsa-invalid-cert-server-staples
1009
973
commands :
1010
974
- func : run server
1011
975
vars :
@@ -1017,7 +981,7 @@ tasks:
1017
981
OCSP_SERVER_TYPE : revoked
1018
982
TEST_NAME : ocsp
1019
983
tags : [ocsp, ocsp-rsa, ocsp-staple]
1020
- - name : test-ocsp-rsa-basic-tls-ocsp-mustStaple-valid-delegate
984
+ - name : test-ocsp-rsa-delegate-valid-cert-server-staples
1021
985
commands :
1022
986
- func : run server
1023
987
vars :
@@ -1029,7 +993,7 @@ tasks:
1029
993
OCSP_SERVER_TYPE : valid-delegate
1030
994
TEST_NAME : ocsp
1031
995
tags : [ocsp, ocsp-rsa, ocsp-staple]
1032
- - name : test-ocsp-rsa-basic-tls-ocsp-mustStaple-revoked-delegate
996
+ - name : test-ocsp-rsa-delegate-invalid-cert-server-staples
1033
997
commands :
1034
998
- func : run server
1035
999
vars :
@@ -1041,6 +1005,42 @@ tasks:
1041
1005
OCSP_SERVER_TYPE : revoked-delegate
1042
1006
TEST_NAME : ocsp
1043
1007
tags : [ocsp, ocsp-rsa, ocsp-staple]
1008
+ - name : test-ocsp-rsa-malicious-invalid-cert-mustStaple-server-does-not-staple
1009
+ commands :
1010
+ - func : run server
1011
+ vars :
1012
+ TEST_NAME : ocsp
1013
+ ORCHESTRATION_FILE : rsa-basic-tls-ocsp-mustStaple-disableStapling.json
1014
+ - func : run tests
1015
+ vars :
1016
+ ORCHESTRATION_FILE : rsa-basic-tls-ocsp-mustStaple-disableStapling.json
1017
+ OCSP_SERVER_TYPE : revoked
1018
+ TEST_NAME : ocsp
1019
+ tags : [ocsp, ocsp-rsa]
1020
+ - name : test-ocsp-rsa-delegate-malicious-invalid-cert-mustStaple-server-does-not-staple
1021
+ commands :
1022
+ - func : run server
1023
+ vars :
1024
+ TEST_NAME : ocsp
1025
+ ORCHESTRATION_FILE : rsa-basic-tls-ocsp-mustStaple-disableStapling.json
1026
+ - func : run tests
1027
+ vars :
1028
+ ORCHESTRATION_FILE : rsa-basic-tls-ocsp-mustStaple-disableStapling.json
1029
+ OCSP_SERVER_TYPE : revoked-delegate
1030
+ TEST_NAME : ocsp
1031
+ tags : [ocsp, ocsp-rsa]
1032
+ - name : test-ocsp-rsa-malicious-no-responder-mustStaple-server-does-not-staple
1033
+ commands :
1034
+ - func : run server
1035
+ vars :
1036
+ TEST_NAME : ocsp
1037
+ ORCHESTRATION_FILE : rsa-basic-tls-ocsp-mustStaple-disableStapling.json
1038
+ - func : run tests
1039
+ vars :
1040
+ ORCHESTRATION_FILE : rsa-basic-tls-ocsp-mustStaple-disableStapling.json
1041
+ OCSP_SERVER_TYPE : no-responder
1042
+ TEST_NAME : ocsp
1043
+ tags : [ocsp, ocsp-rsa]
1044
1044
1045
1045
# Server tests
1046
1046
- name : test-4.0-standalone-auth-ssl-sync
0 commit comments