Switch branches/tags
Nothing to show
Find file History
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
..
Failed to load latest commit information.
testdata
Makefile
README.md
apache-serverinfo.patch
ca-cert.conf
ca-precert.conf
create_url_fetcher_test_certs.sh
default_ca.conf
generate_certs.sh
generate_v2_cms_signed.sh
generate_v2_unit_test_certs.sh
httpd-common.conf
httpd-devel.conf
httpd-invalid.conf
httpd-valid.conf
httpd.envvars
intermediate-ca-cert.conf
intermediate-ca-precert.conf
precert.conf
run_apache_server.sh
run_log_server.sh
run_mirror_server.sh
run_openssl_server.sh
run_xjson_server.sh
sslconnect_test.sh
test_running_server.sh
test_running_ssl_server.sh

README.md

End-To-End Test

The sslconnect_test.sh script does an end-to-end test for the CT log. This involves:

  • creating a server certificate
  • sending the certificate to the log server
  • receiving a log proof
  • setting up Apache to serve the certificate and the log proof
  • verifying the log proof.

To run sslconnect_test.sh, you will need to do the following:

  1. Compile the CT log server and client libraries, following the instructions in the top-level README.

  2. Install Apache, which is needed to run a test SSL server; on Debian based systems installing the apache2 package should suffice. You may also need to modify httpd-local.conf; see the httpd-common.conf file for tips. (Historical instructions for building CT support into Apache are no longer necessary, as Apache now includes support.)

  3. From this test/ directory, run ./sslconnect_test.sh. This will initially run client regression tests with existing certificates. Next, it will generate fresh test certificates and test:

    • the submission of certificates and precertificates to the log server
    • the retrieval of initial Signed Certificate Timestamps
    • serving Signed Certificate Timestamps in a TLS handshake
    • retrieving audit proofs for those SCTs from the log server.

The final output from the tests should be something like:

PASSED 38 tests
FAILED 0 tests