Fix OCSP tests.
authorDr. Stephen Henson <steve@openssl.org>
Tue, 24 Mar 2015 13:15:33 +0000 (13:15 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Tue, 24 Mar 2015 21:22:00 +0000 (21:22 +0000)
OCSP verification changes mean the OCSP tests now need -trusted_first

Reviewed-by: Matt Caswell <matt@openssl.org>
test/tocsp

index 5fc291c..48e81bf 100644 (file)
@@ -8,7 +8,7 @@ check_time="-attime 1355875200"
 test_ocsp () {
 
        $cmd base64 -d -in $ocspdir/$1 | \
-               $cmd ocsp -respin - -partial_chain $check_time \
+               $cmd ocsp -respin - -partial_chain $check_time -trusted_first \
                -CAfile $ocspdir/$2 -verify_other $ocspdir/$2 -CApath /dev/null
        [ $? != $3 ] && exit 1
 }