327f96d281
Update the hierarchy which the integration tests auto-generate inside the ./hierarchy folder to include three intermediates of each key type, two to be actively loaded and one to be held in reserve. To facilitate this: - Update the generation script to loop, rather than hard-coding each intermediate we want - Improve the filenames of the generated hierarchy to be more readable - Replace the WFE's AIA endpoint with a thin aia-test-srv so that we don't have to have NameIDs hardcoded in our ca.json configs Having this new hierarchy will make it easier for our integration tests to validate that new features like "unpredictable issuance" are working correctly. Part of https://github.com/letsencrypt/boulder/issues/729 |
||
|---|---|---|
| .. | ||
| checkari | ||
| checkocsp | ||
| helper | ||
| ocsp_forever | ||
| README.md | ||
README.md
This directory contains two utilities for checking ocsp.
"checkocsp" is a command-line tool to check the OCSP response for a certificate or a list of certificates.
"ocsp_forever" is a similar tool that runs as a daemon and continually checks OCSP for a list of certificates, and exports Prometheus stats.
Both of these are useful for monitoring a Boulder instance. "checkocsp" is also useful for debugging.