Skip to content

ocsp: add delegated responder authorization regression test#383

Merged
mholt merged 1 commit into
caddyserver:masterfrom
1seal:ocsp-responder-auth-regression
May 12, 2026
Merged

ocsp: add delegated responder authorization regression test#383
mholt merged 1 commit into
caddyserver:masterfrom
1seal:ocsp-responder-auth-regression

Conversation

@1seal
Copy link
Copy Markdown
Contributor

@1seal 1seal commented May 12, 2026

ocsp: add delegated responder authorization regression test

summary

adds a stapleOCSP regression test for delegated OCSP responder authorization after #378.

the test covers:

  • a CA-issued responder with ExtKeyUsageOCSPSigning signs a Good response and is stapled
  • a same-issuer responder with only serverAuth signs a Good response for the issued certificate and is rejected before stapling

tests

go test -run TestStapleOCSPDelegatedResponderAuthorization -v
go test ./...

Copy link
Copy Markdown
Member

@mholt mholt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome, thanks for the test!

@mholt mholt merged commit 49b3509 into caddyserver:master May 12, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants