943952 - testing OCSP caching: add httpserv option that will return unknown status for initial requests

Status: NEW

(NSS :: Tools, defect, P5)

Description

[Kai Engert (:KaiE:)]

We should be able to test the fix for bug 933109.

I'd like to go for a very simple approach, adding a new option "3-unknown" to httpserv.

When enabled, httpserv will return status unknown for the initial three OCSP requests, and return the regular result for all subsequent requests.

A client that attempts GET/POST, and is told to retry the verification (another GET/POST), with bug 933109 fixed, should succeed in the 4th request (the 2nd POST).

Comment 1

[Kai Engert (:KaiE:)]

Attachment: patch v1

Comment 2

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

Comment on attachment 8339381 [details] [diff] [review]
patch v1

Kai, it is hard to review this change without also seeing the accompanying changes to the test suite so I can see how it is intended to be used.

I am not very familiar with the command-line utilities in NSS, but if you provide a more complete patch I will try to learn enough to review it all.