Implement self-contained OCSP testing

NEW
Unassigned

Status

6 years ago
4 years ago

People

(Reporter: kaie, Unassigned)

Tracking

(Depends on: 1 bug)

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

6 years ago
Using the functionality from bug 811326, we should be able to remove our current dependency from an external OCSP server.

This requests that we change the NSS OCSP testing scripts, to dynamically create certificates during test runtime
  (instead of using certs from mozilla/security/nss/tests/libpkix/certs)
with an OCSP responder location "localhost"
and using httpserv as a locally running OCSP server (for multiple CAs).
You need to log in before you can comment on or make changes to this bug.