Fix OCSP tests.

OCSP verification changes mean the OCSP tests now need -trusted_first

Reviewed-by: Matt Caswell <matt@openssl.org>

diff --git a/test/tocsp b/test/tocsp
index 5fc291ca6eeb72a97eb9b274f7750b2dc2d2a279..48e81bf3025636d61d7d6f49cf91bda452199b89 100644 (file)
--- a/test/tocsp
+++ b/test/tocsp
@@ -8,7 +8,7 @@ check_time="-attime 1355875200"
 test_ocsp () {
 
        $cmd base64 -d -in $ocspdir/$1 | \
-               $cmd ocsp -respin - -partial_chain $check_time \
+               $cmd ocsp -respin - -partial_chain $check_time -trusted_first \
                -CAfile $ocspdir/$2 -verify_other $ocspdir/$2 -CApath /dev/null
        [ $? != $3 ] && exit 1
 }