letsencrypt
/
boulder
mirror of https://github.com/letsencrypt/boulder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
boulder/test/ocsp
History
Jacob Hoffman-Andrews a8586d05cd
Add integration test for precertificate OCSP. (#4417) 
This test adds support in ct-test-srv for rejecting precertificates by
hostname, in order to artificially generate a condition where a
precertificate is issued but no final certificate can be issued. Right
now the final check in the test is temporarily disabled until the
feature is fixed.

Also, as our first Go-based integration test, this pulls in the
eggsampler/acme Go client, and adds some suport in integration-test.py.

This also refactors ct-test-srv slightly to use a ServeMux, and fixes
a couple of cases of not returning immediately on error.
 		2019-09-06 13:35:08 -07:00
..
checkocsp Add checkocsp and ocsp_forever. (#2632) 2017-04-05 12:05:06 -07:00
helper Add integration test for precertificate OCSP. (#4417) 2019-09-06 13:35:08 -07:00
ocsp_forever Add checkocsp and ocsp_forever. (#2632) 2017-04-05 12:05:06 -07:00
README.md Add checkocsp and ocsp_forever. (#2632) 2017-04-05 12:05:06 -07:00

README.md

This directory contains two utilities for checking ocsp.

"checkocsp" is a command-line tool to check the OCSP response for a certificate or a list of certificates.

"ocsp_forever" is a similar tool that runs as a daemon and continually checks OCSP for a list of certificates, and exports Prometheus stats.

Both of these are useful for monitoring a Boulder instance. "checkocsp" is also useful for debugging.