mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
4453811aee
--HG-- rename : security/nss/lib/freebl/sechash.h => security/nss/lib/cryptohi/sechash.h rename : security/nss/lib/softoken/secmodt.h => security/nss/lib/pk11wrap/secmodt.h rename : security/nss/lib/freebl/hasht.h => security/nss/lib/util/hasht.h extra : rebase_source : 7da6cd73ca2605a261085ad7fb3b90315e38ad6b |
||
---|---|---|
.. | ||
ocspd-certs.sh | ||
ocspd.conf.template | ||
readme |
This script is used to generate certificates used by ocspd. Some steps to run (only once - before all OCSP testing): 1. Edit security/nss/tests/chains/scenarios/scenarios to have there only ocspd.cfg 2. Set environment variable to run only chains tests: export NSS_TESTS=chains.sh 3. Set environment variable to have the correct URI in the certificates: export NSS_AIA_OCSP=http://dochinups.us.oracle.com 4. Run tests: ./all.sh 5. Go to results directory: cd tests_results/security/${HOST}.${ID}/chains 6. Copy ocspd-certs.sh and ocspd.conf.template to this directory 7. Run: ./ocspd-certs.sh OCSPD ${OCSPD_ETC_DIR} ${LIBPKIX_CERTS_DIR}: Example: ./ocspd-certs.sh OCSPD /export/iopr/openca-ocsp-responder/etc/ocspdPKIX \ ~/nss/securitytip/mozilla/security/nss/tests/libpkix/certs 8. Commit the new certificates that have been generated under ~/nss/securitytip/mozilla/security/nss/tests/libpkix/certs 9. Copy config files and keys/certs/crls to ocspd etc directory: cp *.conf /Volumes/dochinups.red.iplanet.com/openca-ocsp-responder/etc/ocspdPKIX cp *.pem *.key /Volumes/dochinups.red.iplanet.com/openca-ocsp-responder/etc/ocspdPKIX/OCSPD 10. Start ocsp deamons on dochinups (for all configs).