wolfssl/tests
Juliusz Sosinowicz 4578e1390f Implement OCSP responder
OCSP Responder Core API:

- Add new public API for creating and managing an OCSP responder
- Add public wrappers for internal OCSP request/response functions
- OcspRespCheck: fix check when authorized responder is loaded into CM

Header Cleanup:

- Remove circular dependency when including `#include <wolfssl/wolfcrypt/asn.h>` from wolfssl/wolfcrypt/ecc.h and wolfssl/wolfcrypt/rsa.h

OCSP Responder Example (examples/ocsp_responder/):

- Add a command-line OCSP responder for interoperability testing with OpenSSL's `openssl ocsp` client

Test Scripts (scripts/):

- ocsp-responder-openssl-interop.test: Tests wolfSSL OCSP responder with `openssl ocsp` client
- ocsp-stapling-with-wolfssl-responder.test: Tests wolfSSL OCSP responder when doing OCSP stapling

Certificate Infrastructure (certs/ocsp/):

- Add DER-format certificates and keys for OCSP testing
- Update renewcerts.sh to generate DER versions

Known Limitations (documented in src/ocsp.c header comment):

  - Single request/response per OCSP exchange only
  - Key-hash responder ID only (no name-based responder ID)
  - No singleExtensions support
2026-03-11 10:21:16 +01:00
..
api Implement OCSP responder 2026-03-11 10:21:16 +01:00
CONF_FILES_README.md
NCONF_test.cnf
README
TXT_DB.txt
api.c Implement OCSP responder 2026-03-11 10:21:16 +01:00
include.am
quic.c update Copyright year 2026-02-18 09:52:21 -07:00
srp.c update Copyright year 2026-02-18 09:52:21 -07:00
suites.c Wdeclaration-after-statement fixes 2026-02-24 16:20:10 +01:00
test-altchains.conf
test-chains.conf
test-dhprime.conf
test-dtls-downgrade.conf
test-dtls-fails-cipher.conf
test-dtls-fails.conf
test-dtls-group.conf
test-dtls-mtu.conf
test-dtls-reneg-client.conf
test-dtls-reneg-server.conf
test-dtls-resume.conf
test-dtls-sha2.conf
test-dtls-srtp-fails.conf
test-dtls-srtp.conf
test-dtls.conf
test-dtls13-cid.conf
test-dtls13-downgrade-fails.conf
test-dtls13-downgrade.conf
test-dtls13-pq-frag.conf
test-dtls13-pq-hybrid-frag.conf
test-dtls13-pq-hybrid.conf
test-dtls13-pq.conf
test-dtls13-psk.conf
test-dtls13.conf
test-ecc-cust-curves.conf Support TLS 1.3 ECC Brainpool authentication 2026-01-22 14:14:09 +01:00
test-ed448.conf
test-ed25519.conf
test-enckeys.conf
test-fails.conf Regression test fixes 2026-01-28 07:37:29 +10:00
test-maxfrag-dtls.conf nginx 1.28.1 2026-02-25 15:19:13 +01:00
test-maxfrag.conf nginx 1.28.1 2026-02-25 15:19:13 +01:00
test-p521.conf
test-psk-no-id-sha2.conf
test-psk-no-id.conf
test-psk.conf
test-rsapss.conf
test-sctp-sha2.conf
test-sctp.conf
test-sha2.conf
test-sig.conf
test-sm2.conf
test-tls-downgrade.conf
test-tls13-down.conf
test-tls13-ecc.conf
test-tls13-pq-hybrid.conf
test-tls13-pq.conf
test-tls13-psk.conf
test-tls13.conf
test-trustpeer.conf
test.conf
unit.c update Copyright year 2026-02-18 09:52:21 -07:00
unit.h update Copyright year 2026-02-18 09:52:21 -07:00
utils.c update Copyright year 2026-02-18 09:52:21 -07:00
utils.h update Copyright year 2026-02-18 09:52:21 -07:00
w64wrapper.c update Copyright year 2026-02-18 09:52:21 -07:00

README

Before creating any new configure files (.conf) read the CONF_FILES_README.md