Return to description.txt CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / testing / tests / ikev2 / ocsp-timeouts-good

Annotation of embedaddon/strongswan/testing/tests/ikev2/ocsp-timeouts-good/description.txt, revision 1.1.1.1

1.1       misho       1: This scenario is based on <a href="../ocsp-signer-cert">ikev2/ocsp-signer-cert</a>
                      2: and tests the timeouts of the <b>libcurl</b> library used for http-based OCSP fetching
                      3: by adding an ocspuri2 in <b>moon</b>'s strongswan ca section that cannot be resolved by
                      4: <b>DNS</b> and an ocspuri2 in <b>carol</b>'s strongswan ca section on which no
                      5: OCSP server is listening. Thanks to timeouts the connection can nevertheless
                      6: be established successfully by contacting a valid OCSP URI contained in
                      7: <b>carol</b>'s certificate.
                      8: <p>
                      9: As an additional test the OCSP response is delayed by a few seconds in order to check
                     10: the correct handling of retransmitted IKE_AUTH messages.