Skip to content

GitLab

Closed
Created by Ghost User@ghost1Contributor

Need testcases for multi-component ocsp stapling

TLS 1.3 supports stapling of certificate status for multiple components of a certificate chain, and GnuTLS supports that. There are no testcases for it under tests/ocsp-tests (at least, going by the response files), and there need to be.

Note that GnuTLS can use either a reponse file with multiple PEM components, or multiple response files. Only the second, with one cert-status per file, results in wire traffic that is acceptable to OpenSSL.