| # This Source Code Form is subject to the terms of the Mozilla Public |
| # License, v. 2.0. If a copy of the MPL was not distributed with this |
| # file, You can obtain one at http://mozilla.org/MPL/2.0/. |
| |
| scenario OCSPD |
| |
| #root CA |
| entity OCSPRoot |
| type Root |
| export_key |
| |
| #CA - OK |
| entity OCSPCA1 |
| type Intermediate |
| issuer OCSPRoot |
| serial 1 |
| ocsp online |
| export_key |
| |
| #CA - revoked |
| entity OCSPCA2 |
| type Intermediate |
| issuer OCSPRoot |
| serial 2 |
| ocsp online |
| export_key |
| |
| #CA - unknown status |
| entity OCSPCA3 |
| type Intermediate |
| issuer OCSPRoot |
| serial 3 |
| ocsp offline |
| export_key |
| |
| #EE - OK |
| entity OCSPEE11 |
| type EE |
| issuer OCSPCA1 |
| serial 1 |
| ocsp online |
| |
| #EE - revoked on OCSP |
| entity OCSPEE12 |
| type EE |
| issuer OCSPCA1 |
| serial 2 |
| ocsp online |
| |
| #EE - revoked on CRL |
| entity OCSPEE13 |
| type EE |
| issuer OCSPCA1 |
| serial 3 |
| ocsp online |
| |
| #EE - revoked on OCSP and CRL |
| entity OCSPEE14 |
| type EE |
| issuer OCSPCA1 |
| serial 4 |
| ocsp online |
| |
| #EE - unknown status |
| entity OCSPEE15 |
| type EE |
| issuer OCSPCA1 |
| serial 5 |
| ocsp offline |
| |
| #EE - valid EE, revoked CA |
| entity OCSPEE21 |
| type EE |
| issuer OCSPCA2 |
| serial 1 |
| ocsp online |
| |
| #EE - revoked EE, revoked CA |
| entity OCSPEE22 |
| type EE |
| issuer OCSPCA2 |
| serial 2 |
| ocsp online |
| |
| #EE - revoked EE, CA pointing to invalid OCSP |
| entity OCSPEE23 |
| type EE |
| issuer OCSPCA2 |
| serial 3 |
| ocsp offline |
| |
| #EE - valid EE, CA pointing to invalid OCSP |
| entity OCSPEE31 |
| type EE |
| issuer OCSPCA3 |
| serial 1 |
| ocsp online |
| |
| #EE - revoked EE, CA pointing to invalid OCSP |
| entity OCSPEE32 |
| type EE |
| issuer OCSPCA3 |
| serial 2 |
| ocsp online |
| |
| #EE - EE pointing to invalid OCSP, CA pointing to invalid OCSP |
| entity OCSPEE33 |
| type EE |
| issuer OCSPCA3 |
| serial 3 |
| ocsp offline |
| |
| crl OCSPRoot |
| |
| revoke OCSPRoot |
| serial 2 |
| |
| crl OCSPCA1 |
| |
| revoke OCSPCA1 |
| serial 2 |
| |
| revoke OCSPCA1 |
| serial 4 |
| |
| crl OCSPCA2 |
| |
| revoke OCSPCA2 |
| serial 2 |
| |
| revoke OCSPCA2 |
| serial 3 |
| |
| crl OCSPCA3 |
| |
| revoke OCSPCA3 |
| serial 2 |
| |
| revoke OCSPCA3 |
| serial 3 |
| |
| # Used for running a single OCSP server (httpserv) instance that can |
| # handle multiple CAs, e.g.: |
| # httpserv -p 8641 -d . -f dbpasswd \ |
| # -A OCSPRoot -C OCSPRoot.crl -A OCSPCA1 -C OCSPCA1.crl \ |
| # -A OCSPCA2 -C OCSPCA2.crl -A OCSPCA3 -C OCSPCA3.crl |
| db Server |
| import OCSPRoot::CT,C,C |
| import_key OCSPRoot |
| import_key OCSPCA1 |
| import_key OCSPCA2 |
| import_key OCSPCA3 |
| |
| # A DB containing all certs, but no keys. |
| # Useful for manual OCSP client testing, e.g.: |
| # ocspclnt -d . -S OCSPEE12OCSPCA1 -u s |
| db Client |
| import OCSPRoot::CT,C,C |
| import OCSPCA1OCSPRoot:: |
| import OCSPCA2OCSPRoot:: |
| import OCSPCA3OCSPRoot:: |
| import OCSPEE11OCSPCA1:: |
| import OCSPEE12OCSPCA1:: |
| import OCSPEE13OCSPCA1:: |
| import OCSPEE14OCSPCA1:: |
| import OCSPEE15OCSPCA1:: |
| import OCSPEE21OCSPCA2:: |
| import OCSPEE22OCSPCA2:: |
| import OCSPEE23OCSPCA2:: |
| import OCSPEE31OCSPCA3:: |
| import OCSPEE32OCSPCA3:: |
| import OCSPEE33OCSPCA3:: |
