diff options
| author | Jose <jose@zeroc.com> | 2022-01-07 13:44:41 +0100 |
|---|---|---|
| committer | Jose <jose@zeroc.com> | 2022-01-07 13:44:41 +0100 |
| commit | a0f5b3cbae911ef8e12e6ebb795897e4d810f651 (patch) | |
| tree | cf26dddbcff7f1135d4a037056285d909b50a5a1 /cpp/test | |
| parent | Undeprecate IceSSL.KeyFile (diff) | |
| download | ice-a0f5b3cbae911ef8e12e6ebb795897e4d810f651.tar.bz2 ice-a0f5b3cbae911ef8e12e6ebb795897e4d810f651.tar.xz ice-a0f5b3cbae911ef8e12e6ebb795897e4d810f651.zip | |
Add comment for IceSSL.CertificateRevocationListFiles
Diffstat (limited to 'cpp/test')
| -rw-r--r-- | cpp/test/IceSSL/configuration/AllTests.cpp | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/cpp/test/IceSSL/configuration/AllTests.cpp b/cpp/test/IceSSL/configuration/AllTests.cpp index 0511e7aad5c..bb0b411f0a5 100644 --- a/cpp/test/IceSSL/configuration/AllTests.cpp +++ b/cpp/test/IceSSL/configuration/AllTests.cpp @@ -4093,6 +4093,7 @@ allTests(Test::TestHelper* helper, const string& /*testDir*/, bool p12) // First test with non revoked certificate that include CRL distribution point initData.properties = createClientProps(defaultProps, p12, "", "cacert3"); + // CLR file used by OpenSSL, OpenSSL doesn't check the CRL distribution points. initData.properties->setProperty("IceSSL.CertificateRevocationListFiles", "ca.crl.pem"); initData.properties->setProperty("IceSSL.RevocationCheck", "1"); initData.properties->setProperty("IceSSL.RevocationCheckCacheOnly", "0"); @@ -4114,6 +4115,7 @@ allTests(Test::TestHelper* helper, const string& /*testDir*/, bool p12) // Repeat with RevoactionCheck=2 to check whole chain initData.properties = createClientProps(defaultProps, p12, "", "cacert3"); + // CLR file used by OpenSSL, OpenSSL doesn't check the CRL distribution points. initData.properties->setProperty("IceSSL.CertificateRevocationListFiles", "ca.crl.pem"); initData.properties->setProperty("IceSSL.RevocationCheck", "2"); initData.properties->setProperty("IceSSL.RevocationCheckCacheOnly", "0"); @@ -4136,6 +4138,7 @@ allTests(Test::TestHelper* helper, const string& /*testDir*/, bool p12) // Repeat with revoked certificate initData.properties = createClientProps(defaultProps, p12, "", "cacert3"); initData.properties->setProperty("IceSSL.RevocationCheck", "0"); + // CLR file used by OpenSSL, OpenSSL doesn't check the CRL distribution points. initData.properties->setProperty("IceSSL.CertificateRevocationListFiles", "ca.crl.pem"); comm = initialize(initData); fact = ICE_CHECKED_CAST(Test::ServerFactoryPrx, comm->stringToProxy(factoryRef)); @@ -4182,6 +4185,7 @@ allTests(Test::TestHelper* helper, const string& /*testDir*/, bool p12) initData.properties = createClientProps(defaultProps, p12, "", "cacert3"); initData.properties->setProperty("IceSSL.RevocationCheck", "2"); initData.properties->setProperty("IceSSL.RevocationCheckCacheOnly", "0"); + // CLR file used by OpenSSL, OpenSSL doesn't check the CRL distribution points. initData.properties->setProperty("IceSSL.CertificateRevocationListFiles", "ca.crl.pem"); initData.properties->setProperty("IceSSL.VerifyPeer", "0"); comm = initialize(initData); @@ -4204,6 +4208,7 @@ allTests(Test::TestHelper* helper, const string& /*testDir*/, bool p12) initData.properties = createClientProps(defaultProps, p12, "", "cacert3"); initData.properties->setProperty("IceSSL.RevocationCheck", "1"); initData.properties->setProperty("IceSSL.RevocationCheckCacheOnly", "0"); + // CLR file used by OpenSSL, OpenSSL doesn't check the CRL distribution points. initData.properties->setProperty("IceSSL.CertificateRevocationListFiles", "ca.crl.pem"); initData.properties->setProperty("IceSSL.VerifyPeer", "0"); |