tree 9a83e02763cf7ec97745e12b61dd36b4c9fea2ed
parent 21f89f542d745adbf1131338929ae538e200d50d
author Matt Caswell <matt@openssl.org> 1649864855 +0100
committer Matt Caswell <matt@openssl.org> 1651571209 +0100

Test ocsp with invalid responses and the "-no_cert_checks" option

The "-no_cert_checks" option causes the flag OCSP_NOCHECKS to be set.
The bug fixed in the previous commit will cause the ocsp app to respond with
a success result in the case when the OCSP response signing certificate
fails to verify and -no_cert_checks is used - so we test that it fails in
this case.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>