Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 # This Source Code Form is subject to the terms of the Mozilla Public
2 # License, v. 2.0. If a copy of the MPL was not distributed with this
3 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
5 scenario OCSPD
7 #root CA
8 entity OCSPRoot
9 type Root
10 export_key
12 #CA - OK
13 entity OCSPCA1
14 type Intermediate
15 issuer OCSPRoot
16 serial 1
17 ocsp online
18 export_key
20 #CA - revoked
21 entity OCSPCA2
22 type Intermediate
23 issuer OCSPRoot
24 serial 2
25 ocsp online
26 export_key
28 #CA - unknown status
29 entity OCSPCA3
30 type Intermediate
31 issuer OCSPRoot
32 serial 3
33 ocsp offline
34 export_key
36 #EE - OK
37 entity OCSPEE11
38 type EE
39 issuer OCSPCA1
40 serial 1
41 ocsp online
43 #EE - revoked on OCSP
44 entity OCSPEE12
45 type EE
46 issuer OCSPCA1
47 serial 2
48 ocsp online
50 #EE - revoked on CRL
51 entity OCSPEE13
52 type EE
53 issuer OCSPCA1
54 serial 3
55 ocsp online
57 #EE - revoked on OCSP and CRL
58 entity OCSPEE14
59 type EE
60 issuer OCSPCA1
61 serial 4
62 ocsp online
64 #EE - unknown status
65 entity OCSPEE15
66 type EE
67 issuer OCSPCA1
68 serial 5
69 ocsp offline
71 #EE - valid EE, revoked CA
72 entity OCSPEE21
73 type EE
74 issuer OCSPCA2
75 serial 1
76 ocsp online
78 #EE - revoked EE, revoked CA
79 entity OCSPEE22
80 type EE
81 issuer OCSPCA2
82 serial 2
83 ocsp online
85 #EE - revoked EE, CA pointing to invalid OCSP
86 entity OCSPEE23
87 type EE
88 issuer OCSPCA2
89 serial 3
90 ocsp offline
92 #EE - valid EE, CA pointing to invalid OCSP
93 entity OCSPEE31
94 type EE
95 issuer OCSPCA3
96 serial 1
97 ocsp online
99 #EE - revoked EE, CA pointing to invalid OCSP
100 entity OCSPEE32
101 type EE
102 issuer OCSPCA3
103 serial 2
104 ocsp online
106 #EE - EE pointing to invalid OCSP, CA pointing to invalid OCSP
107 entity OCSPEE33
108 type EE
109 issuer OCSPCA3
110 serial 3
111 ocsp offline
113 crl OCSPRoot
115 revoke OCSPRoot
116 serial 2
118 crl OCSPCA1
120 revoke OCSPCA1
121 serial 2
123 revoke OCSPCA1
124 serial 4
126 crl OCSPCA2
128 revoke OCSPCA2
129 serial 2
131 revoke OCSPCA2
132 serial 3
134 crl OCSPCA3
136 revoke OCSPCA3
137 serial 2
139 revoke OCSPCA3
140 serial 3
142 # Used for running a single OCSP server (httpserv) instance that can
143 # handle multiple CAs, e.g.:
144 # httpserv -p 8641 -d . -f dbpasswd \
145 # -A OCSPRoot -C OCSPRoot.crl -A OCSPCA1 -C OCSPCA1.crl \
146 # -A OCSPCA2 -C OCSPCA2.crl -A OCSPCA3 -C OCSPCA3.crl
147 db Server
148 import OCSPRoot::CT,C,C
149 import_key OCSPRoot
150 import_key OCSPCA1
151 import_key OCSPCA2
152 import_key OCSPCA3
154 # A DB containing all certs, but no keys.
155 # Useful for manual OCSP client testing, e.g.:
156 # ocspclnt -d . -S OCSPEE12OCSPCA1 -u s
157 db Client
158 import OCSPRoot::CT,C,C
159 import OCSPCA1OCSPRoot::
160 import OCSPCA2OCSPRoot::
161 import OCSPCA3OCSPRoot::
162 import OCSPEE11OCSPCA1::
163 import OCSPEE12OCSPCA1::
164 import OCSPEE13OCSPCA1::
165 import OCSPEE14OCSPCA1::
166 import OCSPEE15OCSPCA1::
167 import OCSPEE21OCSPCA2::
168 import OCSPEE22OCSPCA2::
169 import OCSPEE23OCSPCA2::
170 import OCSPEE31OCSPCA3::
171 import OCSPEE32OCSPCA3::
172 import OCSPEE33OCSPCA3::